[DEPRECATION WARNING]: ANSIBLE_COLLECTIONS_PATHS option, does not fit var naming standard, use the singular form ANSIBLE_COLLECTIONS_PATH instead. This feature will be removed from ansible-core in version 2.19. Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg. No config file found; using defaults running playbook inside collection fedora.linux_system_roles PLAY [Test LUKS] *************************************************************** TASK [Gathering Facts] ********************************************************* Thursday 25 July 2024 07:24:36 -0400 (0:00:00.015) 0:00:00.015 ********* [WARNING]: Platform linux on host managed_node1 is using the discovered Python interpreter at /usr/bin/python3.12, but future installation of another Python interpreter could change the meaning of that path. See https://docs.ansible.com/ansible- core/2.17/reference_appendices/interpreter_discovery.html for more information. ok: [managed_node1] TASK [Enable FIPS mode] ******************************************************** Thursday 25 July 2024 07:24:37 -0400 (0:00:01.300) 0:00:01.316 ********* skipping: [managed_node1] => { "changed": false, "false_condition": "lookup(\"env\", \"SYSTEM_ROLES_TEST_FIPS\") == \"true\"", "skip_reason": "Conditional result was False" } TASK [Reboot] ****************************************************************** Thursday 25 July 2024 07:24:37 -0400 (0:00:00.022) 0:00:01.338 ********* skipping: [managed_node1] => { "changed": false, "false_condition": "lookup(\"env\", \"SYSTEM_ROLES_TEST_FIPS\") == \"true\"", "skip_reason": "Conditional result was False" } TASK [Ensure dracut-fips] ****************************************************** Thursday 25 July 2024 07:24:38 -0400 (0:00:00.020) 0:00:01.358 ********* skipping: [managed_node1] => { "changed": false, "false_condition": "lookup(\"env\", \"SYSTEM_ROLES_TEST_FIPS\") == \"true\"", "skip_reason": "Conditional result was False" } TASK [Configure boot for FIPS] ************************************************* Thursday 25 July 2024 07:24:38 -0400 (0:00:00.020) 0:00:01.379 ********* skipping: [managed_node1] => { "changed": false, "false_condition": "lookup(\"env\", \"SYSTEM_ROLES_TEST_FIPS\") == \"true\"", "skip_reason": "Conditional result was False" } TASK [Reboot] ****************************************************************** Thursday 25 July 2024 07:24:38 -0400 (0:00:00.019) 0:00:01.399 ********* skipping: [managed_node1] => { "changed": false, "false_condition": "lookup(\"env\", \"SYSTEM_ROLES_TEST_FIPS\") == \"true\"", "skip_reason": "Conditional result was False" } TASK [Run the role] ************************************************************ Thursday 25 July 2024 07:24:38 -0400 (0:00:00.019) 0:00:01.419 ********* included: fedora.linux_system_roles.storage for managed_node1 TASK [fedora.linux_system_roles.storage : Set platform/version specific variables] *** Thursday 25 July 2024 07:24:38 -0400 (0:00:00.045) 0:00:01.464 ********* included: /var/ARTIFACTS/work-generalqrud9m2m/plans/general/tree/tmp.Q7l4y5p4BI/ansible_collections/fedora/linux_system_roles/roles/storage/tasks/set_vars.yml for managed_node1 TASK [fedora.linux_system_roles.storage : Ensure ansible_facts used by role] *** Thursday 25 July 2024 07:24:38 -0400 (0:00:00.026) 0:00:01.491 ********* skipping: [managed_node1] => { "changed": false, "false_condition": "__storage_required_facts | difference(ansible_facts.keys() | list) | length > 0", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.storage : Set platform/version specific variables] *** Thursday 25 July 2024 07:24:38 -0400 (0:00:00.029) 0:00:01.520 ********* skipping: [managed_node1] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "RedHat.yml", "skip_reason": "Conditional result was False" } ok: [managed_node1] => (item=Fedora.yml) => { "ansible_facts": { "_storage_copr_packages": [ { "packages": [ "vdo", "kmod-vdo" ], "repository": "rhawalsh/dm-vdo" } ], "_storage_copr_support_packages": [ "dnf-plugins-core" ], "blivet_package_list": [ "python3-blivet", "libblockdev-crypto", "libblockdev-dm", "libblockdev-lvm", "libblockdev-mdraid", "libblockdev-swap", "stratisd", "stratis-cli" ] }, "ansible_included_var_files": [ "/var/ARTIFACTS/work-generalqrud9m2m/plans/general/tree/tmp.Q7l4y5p4BI/ansible_collections/fedora/linux_system_roles/roles/storage/vars/Fedora.yml" ], "ansible_loop_var": "item", "changed": false, "item": "Fedora.yml" } skipping: [managed_node1] => (item=Fedora_39.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "Fedora_39.yml", "skip_reason": "Conditional result was False" } skipping: [managed_node1] => (item=Fedora_39.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "Fedora_39.yml", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.storage : Check if system is ostree] *********** Thursday 25 July 2024 07:24:38 -0400 (0:00:00.052) 0:00:01.572 ********* ok: [managed_node1] => { "changed": false, "stat": { "exists": false } } TASK [fedora.linux_system_roles.storage : Set flag to indicate system is ostree] *** Thursday 25 July 2024 07:24:38 -0400 (0:00:00.519) 0:00:02.092 ********* ok: [managed_node1] => { "ansible_facts": { "__storage_is_ostree": false }, "changed": false } TASK [fedora.linux_system_roles.storage : Define an empty list of pools to be used in testing] *** Thursday 25 July 2024 07:24:38 -0400 (0:00:00.029) 0:00:02.121 ********* ok: [managed_node1] => { "ansible_facts": { "_storage_pools_list": [] }, "changed": false } TASK [fedora.linux_system_roles.storage : Define an empty list of volumes to be used in testing] *** Thursday 25 July 2024 07:24:38 -0400 (0:00:00.019) 0:00:02.141 ********* ok: [managed_node1] => { "ansible_facts": { "_storage_volumes_list": [] }, "changed": false } TASK [fedora.linux_system_roles.storage : Include the appropriate provider tasks] *** Thursday 25 July 2024 07:24:38 -0400 (0:00:00.019) 0:00:02.160 ********* included: /var/ARTIFACTS/work-generalqrud9m2m/plans/general/tree/tmp.Q7l4y5p4BI/ansible_collections/fedora/linux_system_roles/roles/storage/tasks/main-blivet.yml for managed_node1 TASK [fedora.linux_system_roles.storage : Make sure blivet is available] ******* Thursday 25 July 2024 07:24:38 -0400 (0:00:00.059) 0:00:02.220 ********* ok: [managed_node1] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do lsrpackages: libblockdev-crypto libblockdev-dm libblockdev-lvm libblockdev-mdraid libblockdev-swap python3-blivet stratis-cli stratisd TASK [fedora.linux_system_roles.storage : Show storage_pools] ****************** Thursday 25 July 2024 07:24:40 -0400 (0:00:01.980) 0:00:04.201 ********* ok: [managed_node1] => { "storage_pools": "VARIABLE IS NOT DEFINED!: 'storage_pools' is undefined" } TASK [fedora.linux_system_roles.storage : Show storage_volumes] **************** Thursday 25 July 2024 07:24:40 -0400 (0:00:00.024) 0:00:04.225 ********* ok: [managed_node1] => { "storage_volumes": "VARIABLE IS NOT DEFINED!: 'storage_volumes' is undefined" } TASK [fedora.linux_system_roles.storage : Get required packages] *************** Thursday 25 July 2024 07:24:40 -0400 (0:00:00.023) 0:00:04.249 ********* ok: [managed_node1] => { "actions": [], "changed": false, "crypts": [], "leaves": [], "mounts": [], "packages": [], "pools": [], "volumes": [] } TASK [fedora.linux_system_roles.storage : Enable copr repositories if needed] *** Thursday 25 July 2024 07:24:41 -0400 (0:00:00.781) 0:00:05.030 ********* included: /var/ARTIFACTS/work-generalqrud9m2m/plans/general/tree/tmp.Q7l4y5p4BI/ansible_collections/fedora/linux_system_roles/roles/storage/tasks/enable_coprs.yml for managed_node1 TASK [fedora.linux_system_roles.storage : Check if the COPR support packages should be installed] *** Thursday 25 July 2024 07:24:41 -0400 (0:00:00.039) 0:00:05.070 ********* skipping: [managed_node1] => (item={'repository': 'rhawalsh/dm-vdo', 'packages': ['vdo', 'kmod-vdo']}) => { "ansible_loop_var": "repo", "changed": false, "false_condition": "repo.packages | intersect(copr_packages) | length > 0", "repo": { "packages": [ "vdo", "kmod-vdo" ], "repository": "rhawalsh/dm-vdo" }, "skip_reason": "Conditional result was False" } skipping: [managed_node1] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.storage : Make sure COPR support packages are present] *** Thursday 25 July 2024 07:24:41 -0400 (0:00:00.039) 0:00:05.110 ********* skipping: [managed_node1] => { "changed": false, "false_condition": "install_copr | d(false) | bool", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.storage : Enable COPRs] ************************ Thursday 25 July 2024 07:24:41 -0400 (0:00:00.025) 0:00:05.136 ********* skipping: [managed_node1] => (item={'repository': 'rhawalsh/dm-vdo', 'packages': ['vdo', 'kmod-vdo']}) => { "ansible_loop_var": "repo", "changed": false, "false_condition": "repo.packages | intersect(copr_packages) | length > 0", "repo": { "packages": [ "vdo", "kmod-vdo" ], "repository": "rhawalsh/dm-vdo" }, "skip_reason": "Conditional result was False" } skipping: [managed_node1] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.storage : Make sure required packages are installed] *** Thursday 25 July 2024 07:24:41 -0400 (0:00:00.039) 0:00:05.175 ********* ok: [managed_node1] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do lsrpackages: kpartx TASK [fedora.linux_system_roles.storage : Get service facts] ******************* Thursday 25 July 2024 07:24:43 -0400 (0:00:01.755) 0:00:06.931 ********* ok: [managed_node1] => { "ansible_facts": { "services": { "NetworkManager-dispatcher.service": { "name": "NetworkManager-dispatcher.service", "source": "systemd", "state": "inactive", "status": "enabled" }, "NetworkManager-wait-online.service": { "name": "NetworkManager-wait-online.service", "source": "systemd", "state": "stopped", "status": "enabled" }, "NetworkManager.service": { "name": "NetworkManager.service", "source": "systemd", "state": "running", "status": "enabled" }, "arp-ethers.service": { "name": "arp-ethers.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "auditd.service": { "name": "auditd.service", "source": "systemd", "state": "running", "status": "enabled" }, "auth-rpcgss-module.service": { "name": "auth-rpcgss-module.service", "source": "systemd", "state": "stopped", "status": "static" }, "autovt@.service": { "name": "autovt@.service", "source": "systemd", "state": "unknown", "status": "alias" }, "blivet.service": { "name": "blivet.service", "source": "systemd", "state": "inactive", "status": "static" }, "blk-availability.service": { "name": "blk-availability.service", "source": "systemd", "state": "stopped", "status": "disabled" }, "bluetooth.service": { "name": "bluetooth.service", "source": "systemd", "state": "inactive", "status": "enabled" }, "chrony-wait.service": { "name": "chrony-wait.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "chronyd-restricted.service": { "name": "chronyd-restricted.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "chronyd.service": { "name": "chronyd.service", "source": "systemd", "state": "running", "status": "enabled" }, "cloud-config.service": { "name": "cloud-config.service", "source": "systemd", "state": "stopped", "status": "enabled" }, "cloud-final.service": { "name": "cloud-final.service", "source": "systemd", "state": "stopped", "status": "enabled" }, "cloud-init-hotplugd.service": { "name": "cloud-init-hotplugd.service", "source": "systemd", "state": "inactive", "status": "static" }, "cloud-init-local.service": { "name": "cloud-init-local.service", "source": "systemd", "state": "stopped", "status": "enabled" }, "cloud-init.service": { "name": "cloud-init.service", "source": "systemd", "state": "stopped", "status": "enabled" }, "console-getty.service": { "name": "console-getty.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "container-getty@.service": { "name": "container-getty@.service", "source": "systemd", "state": "unknown", "status": "static" }, "dbus-broker.service": { "name": "dbus-broker.service", "source": "systemd", "state": "running", "status": "enabled" }, "dbus-org.bluez.service": { "name": "dbus-org.bluez.service", "source": "systemd", "state": "inactive", "status": "alias" }, "dbus-org.freedesktop.home1.service": { "name": "dbus-org.freedesktop.home1.service", "source": "systemd", "state": "active", "status": "alias" }, "dbus-org.freedesktop.hostname1.service": { "name": "dbus-org.freedesktop.hostname1.service", "source": "systemd", "state": "inactive", "status": "alias" }, "dbus-org.freedesktop.locale1.service": { "name": "dbus-org.freedesktop.locale1.service", "source": "systemd", "state": "inactive", "status": "alias" }, "dbus-org.freedesktop.login1.service": { "name": "dbus-org.freedesktop.login1.service", "source": "systemd", "state": "active", "status": "alias" }, "dbus-org.freedesktop.nm-dispatcher.service": { "name": "dbus-org.freedesktop.nm-dispatcher.service", "source": "systemd", "state": "inactive", "status": "alias" }, "dbus-org.freedesktop.oom1.service": { "name": "dbus-org.freedesktop.oom1.service", "source": "systemd", "state": "active", "status": "alias" }, "dbus-org.freedesktop.portable1.service": { "name": "dbus-org.freedesktop.portable1.service", "source": "systemd", "state": "inactive", "status": "alias" }, "dbus-org.freedesktop.resolve1.service": { "name": "dbus-org.freedesktop.resolve1.service", "source": "systemd", "state": "active", "status": "alias" }, "dbus-org.freedesktop.timedate1.service": { "name": "dbus-org.freedesktop.timedate1.service", "source": "systemd", "state": "inactive", "status": "alias" }, "dbus.service": { "name": "dbus.service", "source": "systemd", "state": "active", "status": "alias" }, "debug-shell.service": { "name": "debug-shell.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "display-manager.service": { "name": "display-manager.service", "source": "systemd", "state": "stopped", "status": "not-found" }, "dm-event.service": { "name": "dm-event.service", "source": "systemd", "state": "stopped", "status": "static" }, "dnf-makecache.service": { "name": "dnf-makecache.service", "source": "systemd", "state": "stopped", "status": "static" }, "dnf-system-upgrade-cleanup.service": { "name": "dnf-system-upgrade-cleanup.service", "source": "systemd", "state": "inactive", "status": "static" }, "dnf-system-upgrade.service": { "name": "dnf-system-upgrade.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "dracut-cmdline.service": { "name": "dracut-cmdline.service", "source": "systemd", "state": "stopped", "status": "static" }, "dracut-initqueue.service": { "name": "dracut-initqueue.service", "source": "systemd", "state": "stopped", "status": "static" }, "dracut-mount.service": { "name": "dracut-mount.service", "source": "systemd", "state": "stopped", "status": "static" }, "dracut-pre-mount.service": { "name": "dracut-pre-mount.service", "source": "systemd", "state": "stopped", "status": "static" }, "dracut-pre-pivot.service": { "name": "dracut-pre-pivot.service", "source": "systemd", "state": "stopped", "status": "static" }, "dracut-pre-trigger.service": { "name": "dracut-pre-trigger.service", "source": "systemd", "state": "stopped", "status": "static" }, "dracut-pre-udev.service": { "name": "dracut-pre-udev.service", "source": "systemd", "state": "stopped", "status": "static" }, "dracut-shutdown-onfailure.service": { "name": "dracut-shutdown-onfailure.service", "source": "systemd", "state": "stopped", "status": "static" }, "dracut-shutdown.service": { "name": "dracut-shutdown.service", "source": "systemd", "state": "stopped", "status": "static" }, "emergency.service": { "name": "emergency.service", "source": "systemd", "state": "stopped", "status": "static" }, "fcoe.service": { "name": "fcoe.service", "source": "systemd", "state": "stopped", "status": "not-found" }, "firewalld.service": { "name": "firewalld.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "fsidd.service": { "name": "fsidd.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "fstrim.service": { "name": "fstrim.service", "source": "systemd", "state": "stopped", "status": "static" }, "fwupd-offline-update.service": { "name": "fwupd-offline-update.service", "source": "systemd", "state": "inactive", "status": "static" }, "fwupd-refresh.service": { "name": "fwupd-refresh.service", "source": "systemd", "state": "inactive", "status": "static" }, "fwupd.service": { "name": "fwupd.service", "source": "systemd", "state": "inactive", "status": "static" }, "getty@.service": { "name": "getty@.service", "source": "systemd", "state": "unknown", "status": "enabled" }, "getty@tty1.service": { "name": "getty@tty1.service", "source": "systemd", "state": "running", "status": "active" }, "grub-boot-indeterminate.service": { "name": "grub-boot-indeterminate.service", "source": "systemd", "state": "inactive", "status": "static" }, "grub2-systemd-integration.service": { "name": "grub2-systemd-integration.service", "source": "systemd", "state": "inactive", "status": "static" }, "gssproxy.service": { "name": "gssproxy.service", "source": "systemd", "state": "running", "status": "disabled" }, "hv_kvp_daemon.service": { "name": "hv_kvp_daemon.service", "source": "systemd", "state": "stopped", "status": "not-found" }, "initrd-cleanup.service": { "name": "initrd-cleanup.service", "source": "systemd", "state": "stopped", "status": "static" }, "initrd-parse-etc.service": { "name": "initrd-parse-etc.service", "source": "systemd", "state": "stopped", "status": "static" }, "initrd-switch-root.service": { "name": "initrd-switch-root.service", "source": "systemd", "state": "stopped", "status": "static" }, "initrd-udevadm-cleanup-db.service": { "name": "initrd-udevadm-cleanup-db.service", "source": "systemd", "state": "stopped", "status": "static" }, "iscsi-shutdown.service": { "name": "iscsi-shutdown.service", "source": "systemd", "state": "stopped", "status": "not-found" }, "iscsi.service": { "name": "iscsi.service", "source": "systemd", "state": "stopped", "status": "not-found" }, "iscsid.service": { "name": "iscsid.service", "source": "systemd", "state": "stopped", "status": "not-found" }, "kmod-static-nodes.service": { "name": "kmod-static-nodes.service", "source": "systemd", "state": "stopped", "status": "static" }, "ldconfig.service": { "name": "ldconfig.service", "source": "systemd", "state": "stopped", "status": "static" }, "lvm2-activation-early.service": { "name": "lvm2-activation-early.service", "source": "systemd", "state": "stopped", "status": "not-found" }, "lvm2-lvmpolld.service": { "name": "lvm2-lvmpolld.service", "source": "systemd", "state": "stopped", "status": "static" }, "lvm2-monitor.service": { "name": "lvm2-monitor.service", "source": "systemd", "state": "stopped", "status": "enabled" }, "man-db-cache-update.service": { "name": "man-db-cache-update.service", "source": "systemd", "state": "inactive", "status": "static" }, "man-db-restart-cache-update.service": { "name": "man-db-restart-cache-update.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "mdadm-grow-continue@.service": { "name": "mdadm-grow-continue@.service", "source": "systemd", "state": "unknown", "status": "static" }, "mdadm-last-resort@.service": { "name": "mdadm-last-resort@.service", "source": "systemd", "state": "unknown", "status": "static" }, "mdcheck_continue.service": { "name": "mdcheck_continue.service", "source": "systemd", "state": "inactive", "status": "static" }, "mdcheck_start.service": { "name": "mdcheck_start.service", "source": "systemd", "state": "inactive", "status": "static" }, "mdmon@.service": { "name": "mdmon@.service", "source": "systemd", "state": "unknown", "status": "static" }, "mdmonitor-oneshot.service": { "name": "mdmonitor-oneshot.service", "source": "systemd", "state": "inactive", "status": "static" }, "mdmonitor.service": { "name": "mdmonitor.service", "source": "systemd", "state": "stopped", "status": "enabled" }, "modprobe@.service": { "name": "modprobe@.service", "source": "systemd", "state": "unknown", "status": "static" }, "modprobe@configfs.service": { "name": "modprobe@configfs.service", "source": "systemd", "state": "stopped", "status": "inactive" }, "modprobe@dm_mod.service": { "name": "modprobe@dm_mod.service", "source": "systemd", "state": "stopped", "status": "inactive" }, "modprobe@drm.service": { "name": "modprobe@drm.service", "source": "systemd", "state": "stopped", "status": "inactive" }, "modprobe@efi_pstore.service": { "name": "modprobe@efi_pstore.service", "source": "systemd", "state": "stopped", "status": "inactive" }, "modprobe@fuse.service": { "name": "modprobe@fuse.service", "source": "systemd", "state": "stopped", "status": "inactive" }, "modprobe@loop.service": { "name": "modprobe@loop.service", "source": "systemd", "state": "stopped", "status": "inactive" }, "multipathd.service": { "name": "multipathd.service", "source": "systemd", "state": "stopped", "status": "enabled" }, "network.service": { "name": "network.service", "source": "systemd", "state": "stopped", "status": "not-found" }, "nfs-blkmap.service": { "name": "nfs-blkmap.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "nfs-idmapd.service": { "name": "nfs-idmapd.service", "source": "systemd", "state": "stopped", "status": "static" }, "nfs-mountd.service": { "name": "nfs-mountd.service", "source": "systemd", "state": "stopped", "status": "static" }, "nfs-server.service": { "name": "nfs-server.service", "source": "systemd", "state": "stopped", "status": "disabled" }, "nfs-utils.service": { "name": "nfs-utils.service", "source": "systemd", "state": "stopped", "status": "static" }, "nfsdcld.service": { "name": "nfsdcld.service", "source": "systemd", "state": "stopped", "status": "static" }, "nftables.service": { "name": "nftables.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "nis-domainname.service": { "name": "nis-domainname.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "nm-priv-helper.service": { "name": "nm-priv-helper.service", "source": "systemd", "state": "inactive", "status": "static" }, "ntpd.service": { "name": "ntpd.service", "source": "systemd", "state": "stopped", "status": "not-found" }, "ntpdate.service": { "name": "ntpdate.service", "source": "systemd", "state": "stopped", "status": "not-found" }, "pam_namespace.service": { "name": "pam_namespace.service", "source": "systemd", "state": "inactive", "status": "static" }, "pcscd.service": { "name": "pcscd.service", "source": "systemd", "state": "stopped", "status": "indirect" }, "plymouth-halt.service": { "name": "plymouth-halt.service", "source": "systemd", "state": "inactive", "status": "static" }, "plymouth-kexec.service": { "name": "plymouth-kexec.service", "source": "systemd", "state": "inactive", "status": "static" }, "plymouth-poweroff.service": { "name": "plymouth-poweroff.service", "source": "systemd", "state": "inactive", "status": "static" }, "plymouth-quit-wait.service": { "name": "plymouth-quit-wait.service", "source": "systemd", "state": "stopped", "status": "static" }, "plymouth-quit.service": { "name": "plymouth-quit.service", "source": "systemd", "state": "stopped", "status": "static" }, "plymouth-read-write.service": { "name": "plymouth-read-write.service", "source": "systemd", "state": "stopped", "status": "static" }, "plymouth-reboot.service": { "name": "plymouth-reboot.service", "source": "systemd", "state": "inactive", "status": "static" }, "plymouth-start.service": { "name": "plymouth-start.service", "source": "systemd", "state": "stopped", "status": "static" }, "plymouth-switch-root-initramfs.service": { "name": "plymouth-switch-root-initramfs.service", "source": "systemd", "state": "inactive", "status": "static" }, "plymouth-switch-root.service": { "name": "plymouth-switch-root.service", "source": "systemd", "state": "stopped", "status": "static" }, "polkit.service": { "name": "polkit.service", "source": "systemd", "state": "running", "status": "static" }, "quotaon.service": { "name": "quotaon.service", "source": "systemd", "state": "inactive", "status": "static" }, "raid-check.service": { "name": "raid-check.service", "source": "systemd", "state": "stopped", "status": "static" }, "rbdmap.service": { "name": "rbdmap.service", "source": "systemd", "state": "stopped", "status": "not-found" }, "rc-local.service": { "name": "rc-local.service", "source": "systemd", "state": "stopped", "status": "static" }, "rescue.service": { "name": "rescue.service", "source": "systemd", "state": "stopped", "status": "static" }, "restraintd.service": { "name": "restraintd.service", "source": "systemd", "state": "running", "status": "enabled" }, "rngd.service": { "name": "rngd.service", "source": "systemd", "state": "running", "status": "enabled" }, "rpc-gssd.service": { "name": "rpc-gssd.service", "source": "systemd", "state": "stopped", "status": "static" }, "rpc-statd-notify.service": { "name": "rpc-statd-notify.service", "source": "systemd", "state": "stopped", "status": "static" }, "rpc-statd.service": { "name": "rpc-statd.service", "source": "systemd", "state": "stopped", "status": "static" }, "rpc-svcgssd.service": { "name": "rpc-svcgssd.service", "source": "systemd", "state": "stopped", "status": "not-found" }, "rpcbind.service": { "name": "rpcbind.service", "source": "systemd", "state": "stopped", "status": "disabled" }, "rpmdb-migrate.service": { "name": "rpmdb-migrate.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "rpmdb-rebuild.service": { "name": "rpmdb-rebuild.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "selinux-autorelabel-mark.service": { "name": "selinux-autorelabel-mark.service", "source": "systemd", "state": "stopped", "status": "enabled" }, "selinux-autorelabel.service": { "name": "selinux-autorelabel.service", "source": "systemd", "state": "inactive", "status": "static" }, "selinux-check-proper-disable.service": { "name": "selinux-check-proper-disable.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "serial-getty@.service": { "name": "serial-getty@.service", "source": "systemd", "state": "unknown", "status": "indirect" }, "serial-getty@ttyS0.service": { "name": "serial-getty@ttyS0.service", "source": "systemd", "state": "running", "status": "active" }, "snapd.seeded.service": { "name": "snapd.seeded.service", "source": "systemd", "state": "stopped", "status": "not-found" }, "sntp.service": { "name": "sntp.service", "source": "systemd", "state": "stopped", "status": "not-found" }, "ssh-host-keys-migration.service": { "name": "ssh-host-keys-migration.service", "source": "systemd", "state": "stopped", "status": "disabled" }, "sshd-keygen.service": { "name": "sshd-keygen.service", "source": "systemd", "state": "stopped", "status": "not-found" }, "sshd-keygen@.service": { "name": "sshd-keygen@.service", "source": "systemd", "state": "unknown", "status": "disabled" }, "sshd-keygen@ecdsa.service": { "name": "sshd-keygen@ecdsa.service", "source": "systemd", "state": "stopped", "status": "inactive" }, "sshd-keygen@ed25519.service": { "name": "sshd-keygen@ed25519.service", "source": "systemd", "state": "stopped", "status": "inactive" }, "sshd-keygen@rsa.service": { "name": "sshd-keygen@rsa.service", "source": "systemd", "state": "stopped", "status": "inactive" }, "sshd.service": { "name": "sshd.service", "source": "systemd", "state": "running", "status": "enabled" }, "sshd@.service": { "name": "sshd@.service", "source": "systemd", "state": "unknown", "status": "static" }, "sssd-autofs.service": { "name": "sssd-autofs.service", "source": "systemd", "state": "inactive", "status": "indirect" }, "sssd-kcm.service": { "name": "sssd-kcm.service", "source": "systemd", "state": "stopped", "status": "indirect" }, "sssd-nss.service": { "name": "sssd-nss.service", "source": "systemd", "state": "inactive", "status": "indirect" }, "sssd-pac.service": { "name": "sssd-pac.service", "source": "systemd", "state": "inactive", "status": "indirect" }, "sssd-pam.service": { "name": "sssd-pam.service", "source": "systemd", "state": "inactive", "status": "indirect" }, "sssd-ssh.service": { "name": "sssd-ssh.service", "source": "systemd", "state": "inactive", "status": "indirect" }, "sssd-sudo.service": { "name": "sssd-sudo.service", "source": "systemd", "state": "inactive", "status": "indirect" }, "sssd.service": { "name": "sssd.service", "source": "systemd", "state": "stopped", "status": "enabled" }, "stratis-fstab-setup@.service": { "name": "stratis-fstab-setup@.service", "source": "systemd", "state": "unknown", "status": "static" }, "stratisd-min-postinitrd.service": { "name": "stratisd-min-postinitrd.service", "source": "systemd", "state": "inactive", "status": "static" }, "stratisd.service": { "name": "stratisd.service", "source": "systemd", "state": "stopped", "status": "enabled" }, "syslog.service": { "name": "syslog.service", "source": "systemd", "state": "stopped", "status": "not-found" }, "system-update-cleanup.service": { "name": "system-update-cleanup.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-ask-password-console.service": { "name": "systemd-ask-password-console.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-ask-password-plymouth.service": { "name": "systemd-ask-password-plymouth.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-ask-password-wall.service": { "name": "systemd-ask-password-wall.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-backlight@.service": { "name": "systemd-backlight@.service", "source": "systemd", "state": "unknown", "status": "static" }, "systemd-battery-check.service": { "name": "systemd-battery-check.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-binfmt.service": { "name": "systemd-binfmt.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-bless-boot.service": { "name": "systemd-bless-boot.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-boot-check-no-failures.service": { "name": "systemd-boot-check-no-failures.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "systemd-boot-random-seed.service": { "name": "systemd-boot-random-seed.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-boot-update.service": { "name": "systemd-boot-update.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "systemd-confext.service": { "name": "systemd-confext.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "systemd-coredump@.service": { "name": "systemd-coredump@.service", "source": "systemd", "state": "unknown", "status": "static" }, "systemd-exit.service": { "name": "systemd-exit.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-firstboot.service": { "name": "systemd-firstboot.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-fsck-root.service": { "name": "systemd-fsck-root.service", "source": "systemd", "state": "stopped", "status": "enabled-runtime" }, "systemd-fsck@.service": { "name": "systemd-fsck@.service", "source": "systemd", "state": "unknown", "status": "static" }, "systemd-growfs-root.service": { "name": "systemd-growfs-root.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-growfs@.service": { "name": "systemd-growfs@.service", "source": "systemd", "state": "unknown", "status": "static" }, "systemd-halt.service": { "name": "systemd-halt.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-hibernate.service": { "name": "systemd-hibernate.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-homed-activate.service": { "name": "systemd-homed-activate.service", "source": "systemd", "state": "stopped", "status": "enabled" }, "systemd-homed.service": { "name": "systemd-homed.service", "source": "systemd", "state": "running", "status": "enabled" }, "systemd-hostnamed.service": { "name": "systemd-hostnamed.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-hwdb-update.service": { "name": "systemd-hwdb-update.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-hybrid-sleep.service": { "name": "systemd-hybrid-sleep.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-initctl.service": { "name": "systemd-initctl.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-journal-catalog-update.service": { "name": "systemd-journal-catalog-update.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-journal-flush.service": { "name": "systemd-journal-flush.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-journald.service": { "name": "systemd-journald.service", "source": "systemd", "state": "running", "status": "static" }, "systemd-journald@.service": { "name": "systemd-journald@.service", "source": "systemd", "state": "unknown", "status": "static" }, "systemd-kexec.service": { "name": "systemd-kexec.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-localed.service": { "name": "systemd-localed.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-logind.service": { "name": "systemd-logind.service", "source": "systemd", "state": "running", "status": "static" }, "systemd-machine-id-commit.service": { "name": "systemd-machine-id-commit.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-modules-load.service": { "name": "systemd-modules-load.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-network-generator.service": { "name": "systemd-network-generator.service", "source": "systemd", "state": "stopped", "status": "enabled" }, "systemd-networkd-wait-online.service": { "name": "systemd-networkd-wait-online.service", "source": "systemd", "state": "stopped", "status": "disabled" }, "systemd-networkd-wait-online@.service": { "name": "systemd-networkd-wait-online@.service", "source": "systemd", "state": "unknown", "status": "disabled" }, "systemd-networkd.service": { "name": "systemd-networkd.service", "source": "systemd", "state": "stopped", "status": "disabled" }, "systemd-oomd.service": { "name": "systemd-oomd.service", "source": "systemd", "state": "running", "status": "enabled" }, "systemd-pcrfs-root.service": { "name": "systemd-pcrfs-root.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-pcrfs@.service": { "name": "systemd-pcrfs@.service", "source": "systemd", "state": "unknown", "status": "static" }, "systemd-pcrmachine.service": { "name": "systemd-pcrmachine.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-pcrphase-initrd.service": { "name": "systemd-pcrphase-initrd.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-pcrphase-sysinit.service": { "name": "systemd-pcrphase-sysinit.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-pcrphase.service": { "name": "systemd-pcrphase.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-portabled.service": { "name": "systemd-portabled.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-poweroff.service": { "name": "systemd-poweroff.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-pstore.service": { "name": "systemd-pstore.service", "source": "systemd", "state": "stopped", "status": "enabled" }, "systemd-quotacheck.service": { "name": "systemd-quotacheck.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-random-seed.service": { "name": "systemd-random-seed.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-reboot.service": { "name": "systemd-reboot.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-remount-fs.service": { "name": "systemd-remount-fs.service", "source": "systemd", "state": "stopped", "status": "enabled-runtime" }, "systemd-repart.service": { "name": "systemd-repart.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-resolved.service": { "name": "systemd-resolved.service", "source": "systemd", "state": "running", "status": "enabled" }, "systemd-rfkill.service": { "name": "systemd-rfkill.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-soft-reboot.service": { "name": "systemd-soft-reboot.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-suspend-then-hibernate.service": { "name": "systemd-suspend-then-hibernate.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-suspend.service": { "name": "systemd-suspend.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-sysctl.service": { "name": "systemd-sysctl.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-sysext.service": { "name": "systemd-sysext.service", "source": "systemd", "state": "stopped", "status": "disabled" }, "systemd-sysupdate-reboot.service": { "name": "systemd-sysupdate-reboot.service", "source": "systemd", "state": "inactive", "status": "indirect" }, "systemd-sysupdate.service": { "name": "systemd-sysupdate.service", "source": "systemd", "state": "inactive", "status": "indirect" }, "systemd-sysusers.service": { "name": "systemd-sysusers.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-time-wait-sync.service": { "name": "systemd-time-wait-sync.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "systemd-timedated.service": { "name": "systemd-timedated.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-timesyncd.service": { "name": "systemd-timesyncd.service", "source": "systemd", "state": "stopped", "status": "disabled" }, "systemd-tmpfiles-clean.service": { "name": "systemd-tmpfiles-clean.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-tmpfiles-setup-dev-early.service": { "name": "systemd-tmpfiles-setup-dev-early.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-tmpfiles-setup-dev.service": { "name": "systemd-tmpfiles-setup-dev.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-tmpfiles-setup.service": { "name": "systemd-tmpfiles-setup.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-udev-settle.service": { "name": "systemd-udev-settle.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-udev-trigger.service": { "name": "systemd-udev-trigger.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-udevd.service": { "name": "systemd-udevd.service", "source": "systemd", "state": "running", "status": "static" }, "systemd-update-done.service": { "name": "systemd-update-done.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-update-utmp-runlevel.service": { "name": "systemd-update-utmp-runlevel.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-update-utmp.service": { "name": "systemd-update-utmp.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-user-sessions.service": { "name": "systemd-user-sessions.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-userdbd.service": { "name": "systemd-userdbd.service", "source": "systemd", "state": "running", "status": "indirect" }, "systemd-vconsole-setup.service": { "name": "systemd-vconsole-setup.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-volatile-root.service": { "name": "systemd-volatile-root.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-zram-setup@.service": { "name": "systemd-zram-setup@.service", "source": "systemd", "state": "unknown", "status": "static" }, "systemd-zram-setup@zram0.service": { "name": "systemd-zram-setup@zram0.service", "source": "systemd", "state": "stopped", "status": "active" }, "udisks2.service": { "name": "udisks2.service", "source": "systemd", "state": "running", "status": "enabled" }, "unbound-anchor.service": { "name": "unbound-anchor.service", "source": "systemd", "state": "stopped", "status": "static" }, "user-runtime-dir@.service": { "name": "user-runtime-dir@.service", "source": "systemd", "state": "unknown", "status": "static" }, "user-runtime-dir@0.service": { "name": "user-runtime-dir@0.service", "source": "systemd", "state": "stopped", "status": "active" }, "user@.service": { "name": "user@.service", "source": "systemd", "state": "unknown", "status": "static" }, "user@0.service": { "name": "user@0.service", "source": "systemd", "state": "running", "status": "active" } } }, "changed": false } TASK [fedora.linux_system_roles.storage : Set storage_cryptsetup_services] ***** Thursday 25 July 2024 07:24:45 -0400 (0:00:02.363) 0:00:09.294 ********* ok: [managed_node1] => { "ansible_facts": { "storage_cryptsetup_services": [] }, "changed": false } TASK [fedora.linux_system_roles.storage : Mask the systemd cryptsetup services] *** Thursday 25 July 2024 07:24:46 -0400 (0:00:00.053) 0:00:09.347 ********* skipping: [managed_node1] => { "changed": false, "skipped_reason": "No items in the list" } TASK [fedora.linux_system_roles.storage : Manage the pools and volumes to match the specified state] *** Thursday 25 July 2024 07:24:46 -0400 (0:00:00.021) 0:00:09.368 ********* ok: [managed_node1] => { "actions": [], "changed": false, "crypts": [], "leaves": [], "mounts": [], "packages": [], "pools": [], "volumes": [] } TASK [fedora.linux_system_roles.storage : Workaround for udev issue on some platforms] *** Thursday 25 July 2024 07:24:46 -0400 (0:00:00.601) 0:00:09.969 ********* skipping: [managed_node1] => { "changed": false, "false_condition": "storage_udevadm_trigger | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.storage : Check if /etc/fstab is present] ****** Thursday 25 July 2024 07:24:46 -0400 (0:00:00.029) 0:00:09.999 ********* ok: [managed_node1] => { "changed": false, "stat": { "atime": 1721904786.802402, "attr_flags": "e", "attributes": [ "extents" ], "block_size": 4096, "blocks": 8, "charset": "us-ascii", "checksum": "b5e855a57e721b6145fa3073b7d52a782c7cc353", "ctime": 1721812896.4059312, "dev": 51714, "device_type": 0, "executable": false, "exists": true, "gid": 0, "gr_name": "root", "inode": 131080, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mimetype": "text/plain", "mode": "0644", "mtime": 1721812896.4059312, "nlink": 1, "path": "/etc/fstab", "pw_name": "root", "readable": true, "rgrp": true, "roth": true, "rusr": true, "size": 1344, "uid": 0, "version": "140625276", "wgrp": false, "woth": false, "writeable": true, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } } TASK [fedora.linux_system_roles.storage : Add fingerprint to /etc/fstab if present] *** Thursday 25 July 2024 07:24:47 -0400 (0:00:00.407) 0:00:10.407 ********* skipping: [managed_node1] => { "changed": false, "false_condition": "blivet_output is changed", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.storage : Unmask the systemd cryptsetup services] *** Thursday 25 July 2024 07:24:47 -0400 (0:00:00.028) 0:00:10.436 ********* skipping: [managed_node1] => { "changed": false, "skipped_reason": "No items in the list" } TASK [fedora.linux_system_roles.storage : Show blivet_output] ****************** Thursday 25 July 2024 07:24:47 -0400 (0:00:00.020) 0:00:10.456 ********* ok: [managed_node1] => { "blivet_output": { "actions": [], "changed": false, "crypts": [], "failed": false, "leaves": [], "mounts": [], "packages": [], "pools": [], "volumes": [] } } TASK [fedora.linux_system_roles.storage : Set the list of pools for test verification] *** Thursday 25 July 2024 07:24:47 -0400 (0:00:00.028) 0:00:10.484 ********* ok: [managed_node1] => { "ansible_facts": { "_storage_pools_list": [] }, "changed": false } TASK [fedora.linux_system_roles.storage : Set the list of volumes for test verification] *** Thursday 25 July 2024 07:24:47 -0400 (0:00:00.027) 0:00:10.512 ********* ok: [managed_node1] => { "ansible_facts": { "_storage_volumes_list": [] }, "changed": false } TASK [fedora.linux_system_roles.storage : Remove obsolete mounts] ************** Thursday 25 July 2024 07:24:47 -0400 (0:00:00.027) 0:00:10.539 ********* skipping: [managed_node1] => { "changed": false, "skipped_reason": "No items in the list" } TASK [fedora.linux_system_roles.storage : Tell systemd to refresh its view of /etc/fstab] *** Thursday 25 July 2024 07:24:47 -0400 (0:00:00.032) 0:00:10.571 ********* skipping: [managed_node1] => { "changed": false, "false_condition": "blivet_output['mounts']", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.storage : Set up new/current mounts] *********** Thursday 25 July 2024 07:24:47 -0400 (0:00:00.022) 0:00:10.593 ********* skipping: [managed_node1] => { "changed": false, "skipped_reason": "No items in the list" } TASK [fedora.linux_system_roles.storage : Manage mount ownership/permissions] *** Thursday 25 July 2024 07:24:47 -0400 (0:00:00.031) 0:00:10.625 ********* skipping: [managed_node1] => { "changed": false, "skipped_reason": "No items in the list" } TASK [fedora.linux_system_roles.storage : Tell systemd to refresh its view of /etc/fstab] *** Thursday 25 July 2024 07:24:47 -0400 (0:00:00.031) 0:00:10.657 ********* skipping: [managed_node1] => { "changed": false, "false_condition": "blivet_output['mounts']", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.storage : Retrieve facts for the /etc/crypttab file] *** Thursday 25 July 2024 07:24:47 -0400 (0:00:00.022) 0:00:10.679 ********* ok: [managed_node1] => { "changed": false, "stat": { "atime": 1721905088.8393722, "attr_flags": "e", "attributes": [ "extents" ], "block_size": 4096, "blocks": 0, "charset": "binary", "checksum": "da39a3ee5e6b4b0d3255bfef95601890afd80709", "ctime": 1721812099.727, "dev": 51714, "device_type": 0, "executable": false, "exists": true, "gid": 0, "gr_name": "root", "inode": 131081, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mimetype": "inode/x-empty", "mode": "0600", "mtime": 1721811598.416, "nlink": 1, "path": "/etc/crypttab", "pw_name": "root", "readable": true, "rgrp": false, "roth": false, "rusr": true, "size": 0, "uid": 0, "version": "3300739401", "wgrp": false, "woth": false, "writeable": true, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } } TASK [fedora.linux_system_roles.storage : Manage /etc/crypttab to account for changes we just made] *** Thursday 25 July 2024 07:24:47 -0400 (0:00:00.400) 0:00:11.080 ********* skipping: [managed_node1] => { "changed": false, "skipped_reason": "No items in the list" } TASK [fedora.linux_system_roles.storage : Update facts] ************************ Thursday 25 July 2024 07:24:47 -0400 (0:00:00.022) 0:00:11.102 ********* ok: [managed_node1] TASK [Get unused disks] ******************************************************** Thursday 25 July 2024 07:24:48 -0400 (0:00:00.944) 0:00:12.046 ********* included: /var/ARTIFACTS/work-generalqrud9m2m/plans/general/tree/tmp.Q7l4y5p4BI/ansible_collections/fedora/linux_system_roles/tests/storage/get_unused_disk.yml for managed_node1 TASK [Ensure test packages] **************************************************** Thursday 25 July 2024 07:24:48 -0400 (0:00:00.046) 0:00:12.093 ********* ok: [managed_node1] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do lsrpackages: util-linux-core TASK [Find unused disks in the system] ***************************************** Thursday 25 July 2024 07:24:50 -0400 (0:00:01.809) 0:00:13.902 ********* ok: [managed_node1] => { "changed": false, "disks": "Unable to find unused disk", "info": [ "Line: NAME=\"/dev/xvda\" TYPE=\"disk\" SIZE=\"268435456000\" FSTYPE=\"\" LOG-SEC=\"512\"", "Line: NAME=\"/dev/xvda1\" TYPE=\"part\" SIZE=\"1048576\" FSTYPE=\"\" LOG-SEC=\"512\"", "Line type [part] is not disk: NAME=\"/dev/xvda1\" TYPE=\"part\" SIZE=\"1048576\" FSTYPE=\"\" LOG-SEC=\"512\"", "Line: NAME=\"/dev/xvda2\" TYPE=\"part\" SIZE=\"268433341952\" FSTYPE=\"ext4\" LOG-SEC=\"512\"", "Line type [part] is not disk: NAME=\"/dev/xvda2\" TYPE=\"part\" SIZE=\"268433341952\" FSTYPE=\"ext4\" LOG-SEC=\"512\"", "Line: NAME=\"/dev/zram0\" TYPE=\"disk\" SIZE=\"3897556992\" FSTYPE=\"\" LOG-SEC=\"4096\"", "filename [xvda2] is a partition", "filename [xvda1] is a partition", "Disk [/dev/xvda] attrs [{'type': 'disk', 'size': '268435456000', 'fstype': '', 'ssize': '512'}] has partitions", "Disk [/dev/zram0] attrs [{'type': 'disk', 'size': '3897556992', 'fstype': '', 'ssize': '4096'}] size is less than requested" ] } TASK [Debug why there are no unused disks] ************************************* Thursday 25 July 2024 07:24:51 -0400 (0:00:00.557) 0:00:14.460 ********* ok: [managed_node1] => { "changed": false, "cmd": "set -x\nexec 1>&2\nlsblk -p --pairs --bytes -o NAME,TYPE,SIZE,FSTYPE,LOG-SEC\njournalctl -ex\n", "delta": "0:00:00.041682", "end": "2024-07-25 07:24:51.628277", "rc": 0, "start": "2024-07-25 07:24:51.586595" } STDERR: + exec + lsblk -p --pairs --bytes -o NAME,TYPE,SIZE,FSTYPE,LOG-SEC NAME="/dev/xvda" TYPE="disk" SIZE="268435456000" FSTYPE="" LOG-SEC="512" NAME="/dev/xvda1" TYPE="part" SIZE="1048576" FSTYPE="" LOG-SEC="512" NAME="/dev/xvda2" TYPE="part" SIZE="268433341952" FSTYPE="ext4" LOG-SEC="512" NAME="/dev/zram0" TYPE="disk" SIZE="3897556992" FSTYPE="" LOG-SEC="4096" + journalctl -ex Jul 25 07:24:20 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:20 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:20 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=148544 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:20 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:20 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:20 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:20 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:20 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=148560 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:20 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:20 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=148582 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=148598 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=148615 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[148633]: USER_ACCT pid=148633 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[148633]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-zvpjkyzmfijgrucueouizcbafmkkruju ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721906660.9030309-23529-22400416681748/AnsiballZ_stat.py' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[148633]: USER_CMD pid=148633 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A76706A6B797A6D66696A6772756375656F75697A636261666D6B6B72756A75203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930363636302E393033303330392D32333532392D32323430303431363638313734382F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[148633]: CRED_REFR pid=148633 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[148633]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[148633]: USER_START pid=148633 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[148635]: ansible-stat Invoked with path=/run/ostree-booted follow=False get_checksum=True get_mime=True get_attributes=True checksum_algorithm=sha1 Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[148633]: USER_END pid=148633 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[148633]: pam_unix(sudo:session): session closed for user root Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[148633]: CRED_DISP pid=148633 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=148636 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=148653 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=148669 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=148691 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=148707 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=148724 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[148742]: USER_ACCT pid=148742 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[148742]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-wxulunvfdqcjjuckpzanlwegjrmshjcm ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721906661.5614057-23541-152588943470734/AnsiballZ_dnf.py' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[148742]: USER_CMD pid=148742 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7778756C756E76666471636A6A75636B707A616E6C7765676A726D73686A636D203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930363636312E353631343035372D32333534312D3135323538383934333437303733342F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[148742]: CRED_REFR pid=148742 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[148742]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:24:21 ip-10-31-15-157.us-east-1.aws.redhat.com audit[148742]: USER_START pid=148742 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:22 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[148744]: ansible-ansible.legacy.dnf Invoked with name=['python3-blivet', 'libblockdev-crypto', 'libblockdev-dm', 'libblockdev-lvm', 'libblockdev-mdraid', 'libblockdev-swap', 'stratisd', 'stratis-cli'] state=present allow_downgrade=False allowerasing=False autoremove=False bugfix=False cacheonly=False disable_gpg_check=False disable_plugin=[] disablerepo=[] download_only=False enable_plugin=[] enablerepo=[] exclude=[] installroot=/ install_repoquery=True install_weak_deps=True security=False skip_broken=False update_cache=False update_only=False validate_certs=True sslverify=True lock_timeout=30 use_backend=auto best=None conf_file=None disable_excludes=None download_dir=None list=None nobest=None releasever=None Jul 25 07:24:23 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[148742]: pam_unix(sudo:session): session closed for user root Jul 25 07:24:23 ip-10-31-15-157.us-east-1.aws.redhat.com audit[148742]: USER_END pid=148742 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:23 ip-10-31-15-157.us-east-1.aws.redhat.com audit[148742]: CRED_DISP pid=148742 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:23 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:23 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:23 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:23 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:23 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=148746 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:23 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:23 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:23 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:23 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:23 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=148763 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:23 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:23 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:23 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:23 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:23 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=148779 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:23 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:23 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:23 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:23 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:23 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=148801 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:23 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:23 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:23 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:23 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:23 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=148817 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:23 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:23 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:23 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:23 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:23 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=148834 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:23 ip-10-31-15-157.us-east-1.aws.redhat.com audit[148852]: USER_ACCT pid=148852 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:23 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[148852]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-nzsixvdxuismmmfaydpxuakhoacpijsf ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721906663.5420222-23551-38981862284498/AnsiballZ_blivet.py' Jul 25 07:24:23 ip-10-31-15-157.us-east-1.aws.redhat.com audit[148852]: USER_CMD pid=148852 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E7A7369787664787569736D6D6D66617964707875616B686F616370696A7366203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930363636332E353432303232322D32333535312D33383938313836323238343439382F416E736962616C6C5A5F626C697665742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:24:23 ip-10-31-15-157.us-east-1.aws.redhat.com audit[148852]: CRED_REFR pid=148852 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:23 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[148852]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:24:23 ip-10-31-15-157.us-east-1.aws.redhat.com audit[148852]: USER_START pid=148852 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:24 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[148854]: ansible-fedora.linux_system_roles.blivet Invoked with pools=[] volumes=[] use_partitions=True disklabel_type=None pool_defaults={'state': 'present', 'type': 'lvm', 'disks': [], 'volumes': [], 'grow_to_fill': False, 'encryption': False, 'encryption_password': None, 'encryption_key': None, 'encryption_cipher': None, 'encryption_key_size': None, 'encryption_luks_version': None, 'raid_level': None, 'raid_device_count': None, 'raid_spare_count': None, 'raid_chunk_size': None, 'raid_metadata_version': None, 'shared': False} volume_defaults={'state': 'present', 'type': 'lvm', 'size': 0, 'disks': [], 'fs_type': 'xfs', 'fs_label': '', 'fs_create_options': '', 'fs_overwrite_existing': True, 'mount_point': '', 'mount_options': 'defaults', 'mount_check': 0, 'mount_passno': 0, 'mount_device_identifier': 'uuid', 'raid_level': None, 'raid_device_count': None, 'raid_spare_count': None, 'raid_chunk_size': None, 'raid_stripe_size': None, 'raid_metadata_version': None, 'encryption': False, 'encryption_password': None, 'encryption_key': None, 'encryption_cipher': None, 'encryption_key_size': None, 'encryption_luks_version': None, 'compression': None, 'deduplication': None, 'vdo_pool_size': None, 'thin': None, 'thin_pool_name': None, 'thin_pool_size': None, 'cached': False, 'cache_size': 0, 'cache_mode': None, 'cache_devices': []} packages_only=True safe_mode=True diskvolume_mkfs_option_map={} Jul 25 07:24:24 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[148852]: pam_unix(sudo:session): session closed for user root Jul 25 07:24:24 ip-10-31-15-157.us-east-1.aws.redhat.com audit[148852]: USER_END pid=148852 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:24 ip-10-31-15-157.us-east-1.aws.redhat.com audit[148852]: CRED_DISP pid=148852 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:24 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:24 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:24 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:24 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:24 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=148858 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:24 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:24 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:24 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:24 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:24 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=148875 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:24 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:24 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:24 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:24 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:24 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=148891 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:24 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:24 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:24 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:24 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:24 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=148913 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:24 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:24 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:24 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:24 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:24 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=148929 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:24 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:24 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:24 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:24 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:24 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=148946 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:24 ip-10-31-15-157.us-east-1.aws.redhat.com audit[148964]: USER_ACCT pid=148964 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:24 ip-10-31-15-157.us-east-1.aws.redhat.com audit[148964]: USER_CMD pid=148964 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776A67656A706E656D7869646D686B726B7A6F64736971796171737669776373203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930363636342E343536333233392D32333536332D38333039383635393533313730332F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:24:24 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[148964]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-wjgejpnemxidmhkrkzodsiqyaqsviwcs ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721906664.4563239-23563-83098659531703/AnsiballZ_dnf.py' Jul 25 07:24:24 ip-10-31-15-157.us-east-1.aws.redhat.com audit[148964]: CRED_REFR pid=148964 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:24 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[148964]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:24:24 ip-10-31-15-157.us-east-1.aws.redhat.com audit[148964]: USER_START pid=148964 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:24 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[148966]: ansible-ansible.legacy.dnf Invoked with name=['kpartx'] state=present allow_downgrade=False allowerasing=False autoremove=False bugfix=False cacheonly=False disable_gpg_check=False disable_plugin=[] disablerepo=[] download_only=False enable_plugin=[] enablerepo=[] exclude=[] installroot=/ install_repoquery=True install_weak_deps=True security=False skip_broken=False update_cache=False update_only=False validate_certs=True sslverify=True lock_timeout=30 use_backend=auto best=None conf_file=None disable_excludes=None download_dir=None list=None nobest=None releasever=None Jul 25 07:24:26 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[148964]: pam_unix(sudo:session): session closed for user root Jul 25 07:24:26 ip-10-31-15-157.us-east-1.aws.redhat.com audit[148964]: USER_END pid=148964 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:26 ip-10-31-15-157.us-east-1.aws.redhat.com audit[148964]: CRED_DISP pid=148964 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:26 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:26 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:26 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:26 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:26 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=148968 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:26 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:26 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:26 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:26 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:26 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=148985 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:26 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:26 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:26 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:26 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:26 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=149001 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:26 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:26 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:26 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:26 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:26 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=149023 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:26 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:26 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:26 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:26 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:26 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=149039 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:26 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:26 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:26 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:26 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:26 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=149056 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:26 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149074]: USER_ACCT pid=149074 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:26 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[149074]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-gulqngdfkoyzfynsonipzoxyrwfffhnx ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721906666.2121768-23571-183783444231706/AnsiballZ_service_facts.py' Jul 25 07:24:26 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149074]: USER_CMD pid=149074 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67756C716E6764666B6F797A66796E736F6E69707A6F78797277666666686E78203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930363636362E323132313736382D32333537312D3138333738333434343233313730362F416E736962616C6C5A5F736572766963655F66616374732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:24:26 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149074]: CRED_REFR pid=149074 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:26 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[149074]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:24:26 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149074]: USER_START pid=149074 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:26 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[149076]: ansible-service_facts Invoked Jul 25 07:24:28 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[149074]: pam_unix(sudo:session): session closed for user root Jul 25 07:24:28 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149074]: USER_END pid=149074 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:28 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149074]: CRED_DISP pid=149074 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:28 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:28 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:28 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:28 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:28 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=149186 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:28 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:28 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:28 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:28 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:28 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=149203 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:28 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:28 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:28 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:28 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:28 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=149219 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:28 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:28 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:28 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:28 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:28 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=149241 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:28 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:28 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:28 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:28 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:28 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=149257 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:28 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:28 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:28 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:28 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:28 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=149274 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:28 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149292]: USER_ACCT pid=149292 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:28 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[149292]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-aajzojaivehusmbqdszkmzzaalrhwewu ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721906668.6528556-23581-141062276162319/AnsiballZ_blivet.py' Jul 25 07:24:28 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149292]: USER_CMD pid=149292 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61616A7A6F6A616976656875736D627164737A6B6D7A7A61616C726877657775203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930363636382E363532383535362D32333538312D3134313036323237363136323331392F416E736962616C6C5A5F626C697665742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:24:28 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149292]: CRED_REFR pid=149292 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:28 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[149292]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:24:28 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149292]: USER_START pid=149292 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[149294]: ansible-fedora.linux_system_roles.blivet Invoked with pools=[] volumes=[] use_partitions=True disklabel_type=None pool_defaults={'state': 'present', 'type': 'lvm', 'disks': [], 'volumes': [], 'grow_to_fill': False, 'encryption': False, 'encryption_password': None, 'encryption_key': None, 'encryption_cipher': None, 'encryption_key_size': None, 'encryption_luks_version': None, 'raid_level': None, 'raid_device_count': None, 'raid_spare_count': None, 'raid_chunk_size': None, 'raid_metadata_version': None, 'shared': False} volume_defaults={'state': 'present', 'type': 'lvm', 'size': 0, 'disks': [], 'fs_type': 'xfs', 'fs_label': '', 'fs_create_options': '', 'fs_overwrite_existing': True, 'mount_point': '', 'mount_options': 'defaults', 'mount_check': 0, 'mount_passno': 0, 'mount_device_identifier': 'uuid', 'raid_level': None, 'raid_device_count': None, 'raid_spare_count': None, 'raid_chunk_size': None, 'raid_stripe_size': None, 'raid_metadata_version': None, 'encryption': False, 'encryption_password': None, 'encryption_key': None, 'encryption_cipher': None, 'encryption_key_size': None, 'encryption_luks_version': None, 'compression': None, 'deduplication': None, 'vdo_pool_size': None, 'thin': None, 'thin_pool_name': None, 'thin_pool_size': None, 'cached': False, 'cache_size': 0, 'cache_mode': None, 'cache_devices': []} safe_mode=False packages_only=False diskvolume_mkfs_option_map={} Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[149292]: pam_unix(sudo:session): session closed for user root Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149292]: USER_END pid=149292 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149292]: CRED_DISP pid=149292 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=149298 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=149315 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=149331 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=149353 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=149369 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=149386 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149404]: USER_ACCT pid=149404 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[149404]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-jwocjqnthiwlvpqelaaeebaoyrddrkvv ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721906669.2748358-23590-144508243273512/AnsiballZ_stat.py' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149404]: USER_CMD pid=149404 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A776F636A716E746869776C767071656C6161656562616F79726464726B7676203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930363636392E323734383335382D32333539302D3134343530383234333237333531322F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149404]: CRED_REFR pid=149404 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[149404]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149404]: USER_START pid=149404 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[149406]: ansible-stat Invoked with path=/etc/fstab follow=False get_checksum=True get_mime=True get_attributes=True checksum_algorithm=sha1 Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149404]: USER_END pid=149404 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[149404]: pam_unix(sudo:session): session closed for user root Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149404]: CRED_DISP pid=149404 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=149409 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=149426 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=149442 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=149464 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=149480 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=149497 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149515]: USER_ACCT pid=149515 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[149515]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-nvwlhguljtceqjjkgiifmjnarcdkvgtc ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721906669.9601922-23608-215531832413064/AnsiballZ_stat.py' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149515]: USER_CMD pid=149515 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E76776C6867756C6A746365716A6A6B676969666D6A6E617263646B76677463203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930363636392E393630313932322D32333630382D3231353533313833323431333036342F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149515]: CRED_REFR pid=149515 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149515]: USER_START pid=149515 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[149515]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[149517]: ansible-stat Invoked with path=/etc/crypttab follow=False get_checksum=True get_mime=True get_attributes=True checksum_algorithm=sha1 Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149515]: USER_END pid=149515 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[149515]: pam_unix(sudo:session): session closed for user root Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149515]: CRED_DISP pid=149515 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=149520 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=149537 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=149553 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=149575 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=149591 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=149608 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149626]: USER_ACCT pid=149626 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[149626]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-boqhoqdyvuyqnehhudpwbhmxpttpmgbj ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721906670.3863225-23617-185271691858139/AnsiballZ_setup.py' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149626]: USER_CMD pid=149626 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626F71686F716479767579716E6568687564707762686D78707474706D67626A203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930363637302E333836333232352D32333631372D3138353237313639313835383133392F416E736962616C6C5A5F73657475702E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149626]: CRED_REFR pid=149626 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[149626]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149626]: USER_START pid=149626 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:30 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[149628]: ansible-setup Invoked with gather_subset=['all'] gather_timeout=10 filter=[] fact_path=/etc/ansible/facts.d Jul 25 07:24:31 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149626]: USER_END pid=149626 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:31 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[149626]: pam_unix(sudo:session): session closed for user root Jul 25 07:24:31 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149626]: CRED_DISP pid=149626 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:31 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:31 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:31 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:31 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:31 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=149653 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:31 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:31 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:31 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:31 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:31 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=149670 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:31 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:31 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:31 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:31 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:31 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=149686 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:31 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:31 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:31 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:31 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:31 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=149708 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:31 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:31 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:31 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:31 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:31 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=149724 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:31 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:31 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:31 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:31 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:31 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=149741 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:31 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149759]: USER_ACCT pid=149759 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:31 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149759]: USER_CMD pid=149759 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E7277756A626A746474756367656473736A6D72667A746A6670657861796170203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930363637312E343232373338332D32333632372D31303334383734373035393737352F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:24:31 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[149759]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-nrwujbjtdtucgedssjmrfztjfpexayap ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721906671.4227383-23627-10348747059775/AnsiballZ_dnf.py' Jul 25 07:24:31 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149759]: CRED_REFR pid=149759 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:31 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[149759]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:24:31 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149759]: USER_START pid=149759 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:31 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[149761]: ansible-ansible.legacy.dnf Invoked with name=['util-linux-core'] state=present allow_downgrade=False allowerasing=False autoremove=False bugfix=False cacheonly=False disable_gpg_check=False disable_plugin=[] disablerepo=[] download_only=False enable_plugin=[] enablerepo=[] exclude=[] installroot=/ install_repoquery=True install_weak_deps=True security=False skip_broken=False update_cache=False update_only=False validate_certs=True sslverify=True lock_timeout=30 use_backend=auto best=None conf_file=None disable_excludes=None download_dir=None list=None nobest=None releasever=None Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[149759]: pam_unix(sudo:session): session closed for user root Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149759]: USER_END pid=149759 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149759]: CRED_DISP pid=149759 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=149763 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=149780 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=149796 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=149818 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=149834 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=149851 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149869]: USER_ACCT pid=149869 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[149869]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-nmoyxtoqorlecocphrivxihfimoacidu ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721906673.1571527-23635-41833124480284/AnsiballZ_find_unused_disk.py' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149869]: USER_CMD pid=149869 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6D6F7978746F716F726C65636F63706872697678696866696D6F6163696475203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930363637332E313537313532372D32333633352D34313833333132343438303238342F416E736962616C6C5A5F66696E645F756E757365645F6469736B2E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149869]: CRED_REFR pid=149869 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[149869]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149869]: USER_START pid=149869 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[149871]: ansible-fedora.linux_system_roles.find_unused_disk Invoked with max_return=3 min_size=0 max_size=0 match_sector_size=False with_interface=None Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[149869]: pam_unix(sudo:session): session closed for user root Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149869]: USER_END pid=149869 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149869]: CRED_DISP pid=149869 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=149875 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=149892 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=149908 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=149930 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=149946 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=149963 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149981]: USER_ACCT pid=149981 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[149981]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-efbntjxhghhgrzglihprootmrslfmzzv ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721906673.6902127-23643-183088685486423/AnsiballZ_command.py' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149981]: USER_CMD pid=149981 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6566626E746A786867686867727A676C696870726F6F746D72736C666D7A7A76203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930363637332E363930323132372D32333634332D3138333038383638353438363432332F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149981]: CRED_REFR pid=149981 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[149981]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:24:33 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149981]: USER_START pid=149981 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:34 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[149983]: ansible-ansible.legacy.command Invoked with _raw_params=set -x exec 1>&2 lsblk -p --pairs --bytes -o NAME,TYPE,SIZE,FSTYPE,LOG-SEC journalctl -ex _uses_shell=True expand_argument_vars=True stdin_add_newline=True strip_empty_ends=True argv=None chdir=None executable=None creates=None removes=None stdin=None Jul 25 07:24:34 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149981]: USER_END pid=149981 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:34 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[149981]: pam_unix(sudo:session): session closed for user root Jul 25 07:24:34 ip-10-31-15-157.us-east-1.aws.redhat.com audit[149981]: CRED_DISP pid=149981 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:34 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:34 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:34 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:34 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:34 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=149986 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:34 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:34 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150003 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150019 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150041 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150059 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150076 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150092 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150109 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[150127]: USER_ACCT pid=150127 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:37 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[150127]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-ipxpximijhurghnnmmotfcuhpttenupu ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721906676.7132204-23703-209419301576882/AnsiballZ_setup.py' Jul 25 07:24:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[150127]: USER_CMD pid=150127 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6970787078696D696A68757267686E6E6D6D6F7466637568707474656E757075203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930363637362E373133323230342D32333730332D3230393431393330313537363838322F416E736962616C6C5A5F73657475702E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:24:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[150127]: CRED_REFR pid=150127 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:37 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[150127]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:24:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[150127]: USER_START pid=150127 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:37 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[150129]: ansible-ansible.legacy.setup Invoked with gather_subset=['all'] gather_timeout=10 filter=[] fact_path=/etc/ansible/facts.d Jul 25 07:24:37 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[150127]: pam_unix(sudo:session): session closed for user root Jul 25 07:24:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[150127]: USER_END pid=150127 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[150127]: CRED_DISP pid=150127 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150154 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150171 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150187 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150209 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150225 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150242 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com audit[150260]: USER_ACCT pid=150260 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com audit[150260]: USER_CMD pid=150260 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71716370626F676279777862786461766B6275787375666479636E7479626166203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930363637382E323830333039372D32333732322D3233363930323930323831303536332F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com audit[150260]: CRED_REFR pid=150260 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[150260]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-qqcpbogbywxbxdavkbuxsufdycntybaf ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721906678.2803097-23722-236902902810563/AnsiballZ_stat.py' Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[150260]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com audit[150260]: USER_START pid=150260 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[150262]: ansible-stat Invoked with path=/run/ostree-booted follow=False get_checksum=True get_mime=True get_attributes=True checksum_algorithm=sha1 Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[150260]: pam_unix(sudo:session): session closed for user root Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com audit[150260]: USER_END pid=150260 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com audit[150260]: CRED_DISP pid=150260 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150263 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150280 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150296 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:38 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150318 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150334 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150351 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[150369]: USER_ACCT pid=150369 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:39 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[150369]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-ziywcfinjeqryrjpayvrjxyawdlatuev ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721906678.9379618-23734-117060069113104/AnsiballZ_dnf.py' Jul 25 07:24:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[150369]: USER_CMD pid=150369 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6979776366696E6A65717279726A70617976726A78796177646C6174756576203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930363637382E393337393631382D32333733342D3131373036303036393131333130342F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:24:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[150369]: CRED_REFR pid=150369 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:39 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[150369]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:24:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[150369]: USER_START pid=150369 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:39 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[150371]: ansible-ansible.legacy.dnf Invoked with name=['python3-blivet', 'libblockdev-crypto', 'libblockdev-dm', 'libblockdev-lvm', 'libblockdev-mdraid', 'libblockdev-swap', 'stratisd', 'stratis-cli'] state=present allow_downgrade=False allowerasing=False autoremove=False bugfix=False cacheonly=False disable_gpg_check=False disable_plugin=[] disablerepo=[] download_only=False enable_plugin=[] enablerepo=[] exclude=[] installroot=/ install_repoquery=True install_weak_deps=True security=False skip_broken=False update_cache=False update_only=False validate_certs=True sslverify=True lock_timeout=30 use_backend=auto best=None conf_file=None disable_excludes=None download_dir=None list=None nobest=None releasever=None Jul 25 07:24:40 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[150369]: pam_unix(sudo:session): session closed for user root Jul 25 07:24:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[150369]: USER_END pid=150369 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[150369]: CRED_DISP pid=150369 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150373 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150390 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150406 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150428 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150444 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150461 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com audit[150479]: USER_ACCT pid=150479 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[150479]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-xsrjwkvgytezufqmdgacbxahkdlaqdsc ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721906680.9672651-23744-236056017324630/AnsiballZ_blivet.py' Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com audit[150479]: USER_CMD pid=150479 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7873726A776B76677974657A7566716D64676163627861686B646C6171647363203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930363638302E393637323635312D32333734342D3233363035363031373332343633302F416E736962616C6C5A5F626C697665742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com audit[150479]: CRED_REFR pid=150479 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[150479]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com audit[150479]: USER_START pid=150479 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[150481]: ansible-fedora.linux_system_roles.blivet Invoked with pools=[] volumes=[] use_partitions=None disklabel_type=None pool_defaults={'state': 'present', 'type': 'lvm', 'disks': [], 'volumes': [], 'grow_to_fill': False, 'encryption': False, 'encryption_password': None, 'encryption_key': None, 'encryption_cipher': None, 'encryption_key_size': None, 'encryption_luks_version': None, 'raid_level': None, 'raid_device_count': None, 'raid_spare_count': None, 'raid_chunk_size': None, 'raid_metadata_version': None, 'shared': False} volume_defaults={'state': 'present', 'type': 'lvm', 'size': 0, 'disks': [], 'fs_type': 'xfs', 'fs_label': '', 'fs_create_options': '', 'fs_overwrite_existing': True, 'mount_point': '', 'mount_options': 'defaults', 'mount_check': 0, 'mount_passno': 0, 'mount_device_identifier': 'uuid', 'raid_level': None, 'raid_device_count': None, 'raid_spare_count': None, 'raid_chunk_size': None, 'raid_stripe_size': None, 'raid_metadata_version': None, 'encryption': False, 'encryption_password': None, 'encryption_key': None, 'encryption_cipher': None, 'encryption_key_size': None, 'encryption_luks_version': None, 'compression': None, 'deduplication': None, 'vdo_pool_size': None, 'thin': None, 'thin_pool_name': None, 'thin_pool_size': None, 'cached': False, 'cache_size': 0, 'cache_mode': None, 'cache_devices': []} packages_only=True safe_mode=True diskvolume_mkfs_option_map={} Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com audit[150479]: USER_END pid=150479 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[150479]: pam_unix(sudo:session): session closed for user root Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com audit[150479]: CRED_DISP pid=150479 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150485 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150502 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150518 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150540 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150556 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:41 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:42 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:42 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:42 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150573 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:42 ip-10-31-15-157.us-east-1.aws.redhat.com audit[150591]: USER_ACCT pid=150591 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:42 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[150591]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-ctwcqgpxfvececzkpkqgblysardinpjo ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721906681.894675-23756-57057258435184/AnsiballZ_dnf.py' Jul 25 07:24:42 ip-10-31-15-157.us-east-1.aws.redhat.com audit[150591]: USER_CMD pid=150591 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63747763716770786676656365637A6B706B7167626C7973617264696E706A6F203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930363638312E3839343637352D32333735362D35373035373235383433353138342F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:24:42 ip-10-31-15-157.us-east-1.aws.redhat.com audit[150591]: CRED_REFR pid=150591 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:42 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[150591]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:24:42 ip-10-31-15-157.us-east-1.aws.redhat.com audit[150591]: USER_START pid=150591 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:42 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[150593]: ansible-ansible.legacy.dnf Invoked with name=['kpartx'] state=present allow_downgrade=False allowerasing=False autoremove=False bugfix=False cacheonly=False disable_gpg_check=False disable_plugin=[] disablerepo=[] download_only=False enable_plugin=[] enablerepo=[] exclude=[] installroot=/ install_repoquery=True install_weak_deps=True security=False skip_broken=False update_cache=False update_only=False validate_certs=True sslverify=True lock_timeout=30 use_backend=auto best=None conf_file=None disable_excludes=None download_dir=None list=None nobest=None releasever=None Jul 25 07:24:43 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[150591]: pam_unix(sudo:session): session closed for user root Jul 25 07:24:43 ip-10-31-15-157.us-east-1.aws.redhat.com audit[150591]: USER_END pid=150591 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:43 ip-10-31-15-157.us-east-1.aws.redhat.com audit[150591]: CRED_DISP pid=150591 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:43 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:43 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:43 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:43 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:43 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150595 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:43 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:43 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:43 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:43 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:43 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150612 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:43 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:43 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:43 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:43 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:43 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150628 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:43 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:43 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:43 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:43 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:43 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150650 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:43 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:43 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:43 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:43 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:43 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150666 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:43 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:43 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:43 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:43 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:43 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150683 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:43 ip-10-31-15-157.us-east-1.aws.redhat.com audit[150701]: USER_ACCT pid=150701 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:43 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[150701]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-xfbvwzyboloouenkaebsmitubxkhvxlx ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721906683.6386542-23764-80953981420616/AnsiballZ_service_facts.py' Jul 25 07:24:43 ip-10-31-15-157.us-east-1.aws.redhat.com audit[150701]: USER_CMD pid=150701 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78666276777A79626F6C6F6F75656E6B616562736D69747562786B6876786C78203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930363638332E363338363534322D32333736342D38303935333938313432303631362F416E736962616C6C5A5F736572766963655F66616374732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:24:43 ip-10-31-15-157.us-east-1.aws.redhat.com audit[150701]: CRED_REFR pid=150701 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:43 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[150701]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:24:43 ip-10-31-15-157.us-east-1.aws.redhat.com audit[150701]: USER_START pid=150701 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:44 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[150703]: ansible-service_facts Invoked Jul 25 07:24:45 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[150701]: pam_unix(sudo:session): session closed for user root Jul 25 07:24:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[150701]: USER_END pid=150701 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[150701]: CRED_DISP pid=150701 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150813 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150830 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150846 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150868 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150884 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150901 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[150919]: USER_ACCT pid=150919 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[150919]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-hlfvnqewphpqozlotzlbkefisbjeildm ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721906686.0842195-23774-68112087867657/AnsiballZ_blivet.py' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[150919]: USER_CMD pid=150919 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686C66766E716577706870716F7A6C6F747A6C626B65666973626A65696C646D203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930363638362E303834323139352D32333737342D36383131323038373836373635372F416E736962616C6C5A5F626C697665742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[150919]: CRED_REFR pid=150919 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[150919]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[150919]: USER_START pid=150919 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[150921]: ansible-fedora.linux_system_roles.blivet Invoked with pools=[] volumes=[] use_partitions=None disklabel_type=None pool_defaults={'state': 'present', 'type': 'lvm', 'disks': [], 'volumes': [], 'grow_to_fill': False, 'encryption': False, 'encryption_password': None, 'encryption_key': None, 'encryption_cipher': None, 'encryption_key_size': None, 'encryption_luks_version': None, 'raid_level': None, 'raid_device_count': None, 'raid_spare_count': None, 'raid_chunk_size': None, 'raid_metadata_version': None, 'shared': False} volume_defaults={'state': 'present', 'type': 'lvm', 'size': 0, 'disks': [], 'fs_type': 'xfs', 'fs_label': '', 'fs_create_options': '', 'fs_overwrite_existing': True, 'mount_point': '', 'mount_options': 'defaults', 'mount_check': 0, 'mount_passno': 0, 'mount_device_identifier': 'uuid', 'raid_level': None, 'raid_device_count': None, 'raid_spare_count': None, 'raid_chunk_size': None, 'raid_stripe_size': None, 'raid_metadata_version': None, 'encryption': False, 'encryption_password': None, 'encryption_key': None, 'encryption_cipher': None, 'encryption_key_size': None, 'encryption_luks_version': None, 'compression': None, 'deduplication': None, 'vdo_pool_size': None, 'thin': None, 'thin_pool_name': None, 'thin_pool_size': None, 'cached': False, 'cache_size': 0, 'cache_mode': None, 'cache_devices': []} safe_mode=True packages_only=False diskvolume_mkfs_option_map={} Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[150919]: pam_unix(sudo:session): session closed for user root Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[150919]: USER_END pid=150919 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[150919]: CRED_DISP pid=150919 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150925 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150942 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150958 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150980 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=150996 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=151013 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[151031]: USER_ACCT pid=151031 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[151031]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-eytnaqcfizmjaofgsijshlcdmxyfylwr ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721906686.7003112-23783-83220532993947/AnsiballZ_stat.py' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[151031]: USER_CMD pid=151031 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6579746E61716366697A6D6A616F666773696A73686C63646D787966796C7772203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930363638362E373030333131322D32333738332D38333232303533323939333934372F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[151031]: CRED_REFR pid=151031 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[151031]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[151031]: USER_START pid=151031 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:46 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[151033]: ansible-stat Invoked with path=/etc/fstab follow=False get_checksum=True get_mime=True get_attributes=True checksum_algorithm=sha1 Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[151031]: pam_unix(sudo:session): session closed for user root Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[151031]: USER_END pid=151031 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[151031]: CRED_DISP pid=151031 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=151036 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=151053 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=151069 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=151091 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=151107 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=151124 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[151142]: USER_ACCT pid=151142 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[151142]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-gcnyzanvcaiplzfdupwlrmthnivhmmqr ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721906687.3788652-23801-88949178099090/AnsiballZ_stat.py' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[151142]: USER_CMD pid=151142 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67636E797A616E76636169706C7A66647570776C726D74686E6976686D6D7172203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930363638372E333738383635322D32333830312D38383934393137383039393039302F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[151142]: CRED_REFR pid=151142 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[151142]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[151142]: USER_START pid=151142 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[151144]: ansible-stat Invoked with path=/etc/crypttab follow=False get_checksum=True get_mime=True get_attributes=True checksum_algorithm=sha1 Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[151142]: USER_END pid=151142 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[151142]: pam_unix(sudo:session): session closed for user root Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[151142]: CRED_DISP pid=151142 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=151147 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=151164 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=151180 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=151202 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=151218 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=151235 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[151253]: USER_ACCT pid=151253 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[151253]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-dkuczxtkpxkikmyorjqznjiasriebqli ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721906687.8019557-23810-24917772730619/AnsiballZ_setup.py' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[151253]: USER_CMD pid=151253 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646B75637A78746B70786B696B6D796F726A717A6E6A69617372696562716C69203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930363638372E383031393535372D32333831302D32343931373737323733303631392F416E736962616C6C5A5F73657475702E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[151253]: CRED_REFR pid=151253 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[151253]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:24:47 ip-10-31-15-157.us-east-1.aws.redhat.com audit[151253]: USER_START pid=151253 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:48 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[151255]: ansible-setup Invoked with gather_subset=['all'] gather_timeout=10 filter=[] fact_path=/etc/ansible/facts.d Jul 25 07:24:48 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[151253]: pam_unix(sudo:session): session closed for user root Jul 25 07:24:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[151253]: USER_END pid=151253 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[151253]: CRED_DISP pid=151253 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=151280 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=151297 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=151313 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=151335 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=151351 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=151368 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[151386]: USER_ACCT pid=151386 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:48 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[151386]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-imrouzjtpxottgpvxerxfuhvairqsmvw ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721906688.8137248-23819-78444656798415/AnsiballZ_dnf.py' Jul 25 07:24:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[151386]: USER_CMD pid=151386 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696D726F757A6A7470786F7474677076786572786675687661697271736D7677203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930363638382E383133373234382D32333831392D37383434343635363739383431352F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:24:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[151386]: CRED_REFR pid=151386 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:48 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[151386]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:24:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[151386]: USER_START pid=151386 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:49 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[151388]: ansible-ansible.legacy.dnf Invoked with name=['util-linux-core'] state=present allow_downgrade=False allowerasing=False autoremove=False bugfix=False cacheonly=False disable_gpg_check=False disable_plugin=[] disablerepo=[] download_only=False enable_plugin=[] enablerepo=[] exclude=[] installroot=/ install_repoquery=True install_weak_deps=True security=False skip_broken=False update_cache=False update_only=False validate_certs=True sslverify=True lock_timeout=30 use_backend=auto best=None conf_file=None disable_excludes=None download_dir=None list=None nobest=None releasever=None Jul 25 07:24:50 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[151386]: pam_unix(sudo:session): session closed for user root Jul 25 07:24:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[151386]: USER_END pid=151386 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[151386]: CRED_DISP pid=151386 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=151390 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=151407 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=151423 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=151445 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=151461 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=151478 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[151496]: USER_ACCT pid=151496 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:50 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[151496]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-hqikshnrkhvyukjkzwbfuydbpsjivztb ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721906690.617383-23827-219422298584604/AnsiballZ_find_unused_disk.py' Jul 25 07:24:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[151496]: USER_CMD pid=151496 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6871696B73686E726B687679756B6A6B7A7762667579646270736A69767A7462203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930363639302E3631373338332D32333832372D3231393432323239383538343630342F416E736962616C6C5A5F66696E645F756E757365645F6469736B2E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:24:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[151496]: CRED_REFR pid=151496 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:50 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[151496]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:24:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[151496]: USER_START pid=151496 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:51 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[151498]: ansible-fedora.linux_system_roles.find_unused_disk Invoked with min_size=5g max_return=1 max_size=0 match_sector_size=False with_interface=None Jul 25 07:24:51 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[151496]: pam_unix(sudo:session): session closed for user root Jul 25 07:24:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[151496]: USER_END pid=151496 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[151496]: CRED_DISP pid=151496 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=151502 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=151519 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=151535 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=151557 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=151573 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:24:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:24:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=151590 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:24:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[151608]: USER_ACCT pid=151608 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:51 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[151608]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-pfqgimiuvvsmfjeyzdjrkmfufouujxyo ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721906691.1610844-23835-18713737273757/AnsiballZ_command.py' Jul 25 07:24:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[151608]: USER_CMD pid=151608 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70667167696D69757676736D666A65797A646A726B6D6675666F75756A78796F203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930363639312E313631303834342D32333833352D31383731333733373237333735372F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:24:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[151608]: CRED_REFR pid=151608 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:51 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[151608]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:24:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[151608]: USER_START pid=151608 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:24:51 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[151610]: ansible-ansible.legacy.command Invoked with _raw_params=set -x exec 1>&2 lsblk -p --pairs --bytes -o NAME,TYPE,SIZE,FSTYPE,LOG-SEC journalctl -ex _uses_shell=True expand_argument_vars=True stdin_add_newline=True strip_empty_ends=True argv=None chdir=None executable=None creates=None removes=None stdin=None TASK [Set unused_disks if necessary] ******************************************* Thursday 25 July 2024 07:24:51 -0400 (0:00:00.595) 0:00:15.056 ********* skipping: [managed_node1] => { "changed": false, "false_condition": "'Unable to find unused disk' not in unused_disks_return.disks", "skip_reason": "Conditional result was False" } TASK [Exit playbook when there's not enough unused disks in the system] ******** Thursday 25 July 2024 07:24:51 -0400 (0:00:00.022) 0:00:15.079 ********* fatal: [managed_node1]: FAILED! => { "changed": false } MSG: Unable to find enough unused disks. Exiting playbook. PLAY RECAP ********************************************************************* managed_node1 : ok=28 changed=0 unreachable=0 failed=1 skipped=20 rescued=0 ignored=0 Thursday 25 July 2024 07:24:51 -0400 (0:00:00.027) 0:00:15.106 ********* =============================================================================== fedora.linux_system_roles.storage : Get service facts ------------------- 2.36s fedora.linux_system_roles.storage : Make sure blivet is available ------- 1.98s Ensure test packages ---------------------------------------------------- 1.81s fedora.linux_system_roles.storage : Make sure required packages are installed --- 1.76s Gathering Facts --------------------------------------------------------- 1.30s fedora.linux_system_roles.storage : Update facts ------------------------ 0.94s fedora.linux_system_roles.storage : Get required packages --------------- 0.78s fedora.linux_system_roles.storage : Manage the pools and volumes to match the specified state --- 0.60s Debug why there are no unused disks ------------------------------------- 0.60s Find unused disks in the system ----------------------------------------- 0.56s fedora.linux_system_roles.storage : Check if system is ostree ----------- 0.52s fedora.linux_system_roles.storage : Check if /etc/fstab is present ------ 0.41s fedora.linux_system_roles.storage : Retrieve facts for the /etc/crypttab file --- 0.40s fedora.linux_system_roles.storage : Include the appropriate provider tasks --- 0.06s fedora.linux_system_roles.storage : Set storage_cryptsetup_services ----- 0.05s fedora.linux_system_roles.storage : Set platform/version specific variables --- 0.05s Get unused disks -------------------------------------------------------- 0.05s Run the role ------------------------------------------------------------ 0.05s fedora.linux_system_roles.storage : Enable copr repositories if needed --- 0.04s fedora.linux_system_roles.storage : Enable COPRs ------------------------ 0.04s