[DEPRECATION WARNING]: ANSIBLE_COLLECTIONS_PATHS option, does not fit var naming standard, use the singular form ANSIBLE_COLLECTIONS_PATH instead. This feature will be removed from ansible-core in version 2.19. Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg. No config file found; using defaults running playbook inside collection fedora.linux_system_roles PLAY [Test misc features of the storage role] ********************************** TASK [Gathering Facts] ********************************************************* Thursday 25 July 2024 07:00:43 -0400 (0:00:00.011) 0:00:00.011 ********* [WARNING]: Platform linux on host managed_node1 is using the discovered Python interpreter at /usr/bin/python3.12, but future installation of another Python interpreter could change the meaning of that path. See https://docs.ansible.com/ansible- core/2.17/reference_appendices/interpreter_discovery.html for more information. ok: [managed_node1] TASK [Include the role to ensure packages are installed] *********************** Thursday 25 July 2024 07:00:45 -0400 (0:00:01.326) 0:00:01.338 ********* included: fedora.linux_system_roles.storage for managed_node1 TASK [fedora.linux_system_roles.storage : Set platform/version specific variables] *** Thursday 25 July 2024 07:00:45 -0400 (0:00:00.035) 0:00:01.374 ********* included: /var/ARTIFACTS/work-generalqrud9m2m/plans/general/tree/tmp.Q7l4y5p4BI/ansible_collections/fedora/linux_system_roles/roles/storage/tasks/set_vars.yml for managed_node1 TASK [fedora.linux_system_roles.storage : Ensure ansible_facts used by role] *** Thursday 25 July 2024 07:00:45 -0400 (0:00:00.027) 0:00:01.401 ********* skipping: [managed_node1] => { "changed": false, "false_condition": "__storage_required_facts | difference(ansible_facts.keys() | list) | length > 0", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.storage : Set platform/version specific variables] *** Thursday 25 July 2024 07:00:45 -0400 (0:00:00.029) 0:00:01.431 ********* skipping: [managed_node1] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "RedHat.yml", "skip_reason": "Conditional result was False" } ok: [managed_node1] => (item=Fedora.yml) => { "ansible_facts": { "_storage_copr_packages": [ { "packages": [ "vdo", "kmod-vdo" ], "repository": "rhawalsh/dm-vdo" } ], "_storage_copr_support_packages": [ "dnf-plugins-core" ], "blivet_package_list": [ "python3-blivet", "libblockdev-crypto", "libblockdev-dm", "libblockdev-lvm", "libblockdev-mdraid", "libblockdev-swap", "stratisd", "stratis-cli" ] }, "ansible_included_var_files": [ "/var/ARTIFACTS/work-generalqrud9m2m/plans/general/tree/tmp.Q7l4y5p4BI/ansible_collections/fedora/linux_system_roles/roles/storage/vars/Fedora.yml" ], "ansible_loop_var": "item", "changed": false, "item": "Fedora.yml" } skipping: [managed_node1] => (item=Fedora_39.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "Fedora_39.yml", "skip_reason": "Conditional result was False" } skipping: [managed_node1] => (item=Fedora_39.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "Fedora_39.yml", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.storage : Check if system is ostree] *********** Thursday 25 July 2024 07:00:45 -0400 (0:00:00.052) 0:00:01.483 ********* ok: [managed_node1] => { "changed": false, "stat": { "exists": false } } TASK [fedora.linux_system_roles.storage : Set flag to indicate system is ostree] *** Thursday 25 July 2024 07:00:45 -0400 (0:00:00.526) 0:00:02.009 ********* ok: [managed_node1] => { "ansible_facts": { "__storage_is_ostree": false }, "changed": false } TASK [fedora.linux_system_roles.storage : Define an empty list of pools to be used in testing] *** Thursday 25 July 2024 07:00:45 -0400 (0:00:00.030) 0:00:02.040 ********* ok: [managed_node1] => { "ansible_facts": { "_storage_pools_list": [] }, "changed": false } TASK [fedora.linux_system_roles.storage : Define an empty list of volumes to be used in testing] *** Thursday 25 July 2024 07:00:46 -0400 (0:00:00.019) 0:00:02.060 ********* ok: [managed_node1] => { "ansible_facts": { "_storage_volumes_list": [] }, "changed": false } TASK [fedora.linux_system_roles.storage : Include the appropriate provider tasks] *** Thursday 25 July 2024 07:00:46 -0400 (0:00:00.020) 0:00:02.080 ********* included: /var/ARTIFACTS/work-generalqrud9m2m/plans/general/tree/tmp.Q7l4y5p4BI/ansible_collections/fedora/linux_system_roles/roles/storage/tasks/main-blivet.yml for managed_node1 TASK [fedora.linux_system_roles.storage : Make sure blivet is available] ******* Thursday 25 July 2024 07:00:46 -0400 (0:00:00.061) 0:00:02.142 ********* ok: [managed_node1] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do lsrpackages: libblockdev-crypto libblockdev-dm libblockdev-lvm libblockdev-mdraid libblockdev-swap python3-blivet stratis-cli stratisd TASK [fedora.linux_system_roles.storage : Show storage_pools] ****************** Thursday 25 July 2024 07:00:48 -0400 (0:00:02.018) 0:00:04.161 ********* ok: [managed_node1] => { "storage_pools": "VARIABLE IS NOT DEFINED!: 'storage_pools' is undefined" } TASK [fedora.linux_system_roles.storage : Show storage_volumes] **************** Thursday 25 July 2024 07:00:48 -0400 (0:00:00.026) 0:00:04.188 ********* ok: [managed_node1] => { "storage_volumes": "VARIABLE IS NOT DEFINED!: 'storage_volumes' is undefined" } TASK [fedora.linux_system_roles.storage : Get required packages] *************** Thursday 25 July 2024 07:00:48 -0400 (0:00:00.023) 0:00:04.211 ********* ok: [managed_node1] => { "actions": [], "changed": false, "crypts": [], "leaves": [], "mounts": [], "packages": [], "pools": [], "volumes": [] } TASK [fedora.linux_system_roles.storage : Enable copr repositories if needed] *** Thursday 25 July 2024 07:00:48 -0400 (0:00:00.790) 0:00:05.002 ********* included: /var/ARTIFACTS/work-generalqrud9m2m/plans/general/tree/tmp.Q7l4y5p4BI/ansible_collections/fedora/linux_system_roles/roles/storage/tasks/enable_coprs.yml for managed_node1 TASK [fedora.linux_system_roles.storage : Check if the COPR support packages should be installed] *** Thursday 25 July 2024 07:00:48 -0400 (0:00:00.041) 0:00:05.043 ********* skipping: [managed_node1] => (item={'repository': 'rhawalsh/dm-vdo', 'packages': ['vdo', 'kmod-vdo']}) => { "ansible_loop_var": "repo", "changed": false, "false_condition": "repo.packages | intersect(copr_packages) | length > 0", "repo": { "packages": [ "vdo", "kmod-vdo" ], "repository": "rhawalsh/dm-vdo" }, "skip_reason": "Conditional result was False" } skipping: [managed_node1] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.storage : Make sure COPR support packages are present] *** Thursday 25 July 2024 07:00:49 -0400 (0:00:00.040) 0:00:05.083 ********* skipping: [managed_node1] => { "changed": false, "false_condition": "install_copr | d(false) | bool", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.storage : Enable COPRs] ************************ Thursday 25 July 2024 07:00:49 -0400 (0:00:00.026) 0:00:05.110 ********* skipping: [managed_node1] => (item={'repository': 'rhawalsh/dm-vdo', 'packages': ['vdo', 'kmod-vdo']}) => { "ansible_loop_var": "repo", "changed": false, "false_condition": "repo.packages | intersect(copr_packages) | length > 0", "repo": { "packages": [ "vdo", "kmod-vdo" ], "repository": "rhawalsh/dm-vdo" }, "skip_reason": "Conditional result was False" } skipping: [managed_node1] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.storage : Make sure required packages are installed] *** Thursday 25 July 2024 07:00:49 -0400 (0:00:00.040) 0:00:05.150 ********* ok: [managed_node1] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do lsrpackages: kpartx TASK [fedora.linux_system_roles.storage : Get service facts] ******************* Thursday 25 July 2024 07:00:50 -0400 (0:00:01.774) 0:00:06.925 ********* ok: [managed_node1] => { "ansible_facts": { "services": { "NetworkManager-dispatcher.service": { "name": "NetworkManager-dispatcher.service", "source": "systemd", "state": "inactive", "status": "enabled" }, "NetworkManager-wait-online.service": { "name": "NetworkManager-wait-online.service", "source": "systemd", "state": "stopped", "status": "enabled" }, "NetworkManager.service": { "name": "NetworkManager.service", "source": "systemd", "state": "running", "status": "enabled" }, "arp-ethers.service": { "name": "arp-ethers.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "auditd.service": { "name": "auditd.service", "source": "systemd", "state": "running", "status": "enabled" }, "auth-rpcgss-module.service": { "name": "auth-rpcgss-module.service", "source": "systemd", "state": "stopped", "status": "static" }, "autovt@.service": { "name": "autovt@.service", "source": "systemd", "state": "unknown", "status": "alias" }, "blivet.service": { "name": "blivet.service", "source": "systemd", "state": "inactive", "status": "static" }, "blk-availability.service": { "name": "blk-availability.service", "source": "systemd", "state": "stopped", "status": "disabled" }, "bluetooth.service": { "name": "bluetooth.service", "source": "systemd", "state": "inactive", "status": "enabled" }, "chrony-wait.service": { "name": "chrony-wait.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "chronyd-restricted.service": { "name": "chronyd-restricted.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "chronyd.service": { "name": "chronyd.service", "source": "systemd", "state": "running", "status": "enabled" }, "cloud-config.service": { "name": "cloud-config.service", "source": "systemd", "state": "stopped", "status": "enabled" }, "cloud-final.service": { "name": "cloud-final.service", "source": "systemd", "state": "stopped", "status": "enabled" }, "cloud-init-hotplugd.service": { "name": "cloud-init-hotplugd.service", "source": "systemd", "state": "inactive", "status": "static" }, "cloud-init-local.service": { "name": "cloud-init-local.service", "source": "systemd", "state": "stopped", "status": "enabled" }, "cloud-init.service": { "name": "cloud-init.service", "source": "systemd", "state": "stopped", "status": "enabled" }, "console-getty.service": { "name": "console-getty.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "container-getty@.service": { "name": "container-getty@.service", "source": "systemd", "state": "unknown", "status": "static" }, "dbus-broker.service": { "name": "dbus-broker.service", "source": "systemd", "state": "running", "status": "enabled" }, "dbus-org.bluez.service": { "name": "dbus-org.bluez.service", "source": "systemd", "state": "inactive", "status": "alias" }, "dbus-org.freedesktop.home1.service": { "name": "dbus-org.freedesktop.home1.service", "source": "systemd", "state": "active", "status": "alias" }, "dbus-org.freedesktop.hostname1.service": { "name": "dbus-org.freedesktop.hostname1.service", "source": "systemd", "state": "inactive", "status": "alias" }, "dbus-org.freedesktop.locale1.service": { "name": "dbus-org.freedesktop.locale1.service", "source": "systemd", "state": "inactive", "status": "alias" }, "dbus-org.freedesktop.login1.service": { "name": "dbus-org.freedesktop.login1.service", "source": "systemd", "state": "active", "status": "alias" }, "dbus-org.freedesktop.nm-dispatcher.service": { "name": "dbus-org.freedesktop.nm-dispatcher.service", "source": "systemd", "state": "inactive", "status": "alias" }, "dbus-org.freedesktop.oom1.service": { "name": "dbus-org.freedesktop.oom1.service", "source": "systemd", "state": "active", "status": "alias" }, "dbus-org.freedesktop.portable1.service": { "name": "dbus-org.freedesktop.portable1.service", "source": "systemd", "state": "inactive", "status": "alias" }, "dbus-org.freedesktop.resolve1.service": { "name": "dbus-org.freedesktop.resolve1.service", "source": "systemd", "state": "active", "status": "alias" }, "dbus-org.freedesktop.timedate1.service": { "name": "dbus-org.freedesktop.timedate1.service", "source": "systemd", "state": "inactive", "status": "alias" }, "dbus.service": { "name": "dbus.service", "source": "systemd", "state": "active", "status": "alias" }, "debug-shell.service": { "name": "debug-shell.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "display-manager.service": { "name": "display-manager.service", "source": "systemd", "state": "stopped", "status": "not-found" }, "dm-event.service": { "name": "dm-event.service", "source": "systemd", "state": "stopped", "status": "static" }, "dnf-makecache.service": { "name": "dnf-makecache.service", "source": "systemd", "state": "stopped", "status": "static" }, "dnf-system-upgrade-cleanup.service": { "name": "dnf-system-upgrade-cleanup.service", "source": "systemd", "state": "inactive", "status": "static" }, "dnf-system-upgrade.service": { "name": "dnf-system-upgrade.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "dracut-cmdline.service": { "name": "dracut-cmdline.service", "source": "systemd", "state": "stopped", "status": "static" }, "dracut-initqueue.service": { "name": "dracut-initqueue.service", "source": "systemd", "state": "stopped", "status": "static" }, "dracut-mount.service": { "name": "dracut-mount.service", "source": "systemd", "state": "stopped", "status": "static" }, "dracut-pre-mount.service": { "name": "dracut-pre-mount.service", "source": "systemd", "state": "stopped", "status": "static" }, "dracut-pre-pivot.service": { "name": "dracut-pre-pivot.service", "source": "systemd", "state": "stopped", "status": "static" }, "dracut-pre-trigger.service": { "name": "dracut-pre-trigger.service", "source": "systemd", "state": "stopped", "status": "static" }, "dracut-pre-udev.service": { "name": "dracut-pre-udev.service", "source": "systemd", "state": "stopped", "status": "static" }, "dracut-shutdown-onfailure.service": { "name": "dracut-shutdown-onfailure.service", "source": "systemd", "state": "stopped", "status": "static" }, "dracut-shutdown.service": { "name": "dracut-shutdown.service", "source": "systemd", "state": "stopped", "status": "static" }, "emergency.service": { "name": "emergency.service", "source": "systemd", "state": "stopped", "status": "static" }, "fcoe.service": { "name": "fcoe.service", "source": "systemd", "state": "stopped", "status": "not-found" }, "firewalld.service": { "name": "firewalld.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "fsidd.service": { "name": "fsidd.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "fstrim.service": { "name": "fstrim.service", "source": "systemd", "state": "stopped", "status": "static" }, "fwupd-offline-update.service": { "name": "fwupd-offline-update.service", "source": "systemd", "state": "inactive", "status": "static" }, "fwupd-refresh.service": { "name": "fwupd-refresh.service", "source": "systemd", "state": "inactive", "status": "static" }, "fwupd.service": { "name": "fwupd.service", "source": "systemd", "state": "inactive", "status": "static" }, "getty@.service": { "name": "getty@.service", "source": "systemd", "state": "unknown", "status": "enabled" }, "getty@tty1.service": { "name": "getty@tty1.service", "source": "systemd", "state": "running", "status": "active" }, "grub-boot-indeterminate.service": { "name": "grub-boot-indeterminate.service", "source": "systemd", "state": "inactive", "status": "static" }, "grub2-systemd-integration.service": { "name": "grub2-systemd-integration.service", "source": "systemd", "state": "inactive", "status": "static" }, "gssproxy.service": { "name": "gssproxy.service", "source": "systemd", "state": "running", "status": "disabled" }, "hv_kvp_daemon.service": { "name": "hv_kvp_daemon.service", "source": "systemd", "state": "stopped", "status": "not-found" }, "initrd-cleanup.service": { "name": "initrd-cleanup.service", "source": "systemd", "state": "stopped", "status": "static" }, "initrd-parse-etc.service": { "name": "initrd-parse-etc.service", "source": "systemd", "state": "stopped", "status": "static" }, "initrd-switch-root.service": { "name": "initrd-switch-root.service", "source": "systemd", "state": "stopped", "status": "static" }, "initrd-udevadm-cleanup-db.service": { "name": "initrd-udevadm-cleanup-db.service", "source": "systemd", "state": "stopped", "status": "static" }, "iscsi-shutdown.service": { "name": "iscsi-shutdown.service", "source": "systemd", "state": "stopped", "status": "not-found" }, "iscsi.service": { "name": "iscsi.service", "source": "systemd", "state": "stopped", "status": "not-found" }, "iscsid.service": { "name": "iscsid.service", "source": "systemd", "state": "stopped", "status": "not-found" }, "kmod-static-nodes.service": { "name": "kmod-static-nodes.service", "source": "systemd", "state": "stopped", "status": "static" }, "ldconfig.service": { "name": "ldconfig.service", "source": "systemd", "state": "stopped", "status": "static" }, "lvm2-activation-early.service": { "name": "lvm2-activation-early.service", "source": "systemd", "state": "stopped", "status": "not-found" }, "lvm2-lvmpolld.service": { "name": "lvm2-lvmpolld.service", "source": "systemd", "state": "stopped", "status": "static" }, "lvm2-monitor.service": { "name": "lvm2-monitor.service", "source": "systemd", "state": "stopped", "status": "enabled" }, "man-db-cache-update.service": { "name": "man-db-cache-update.service", "source": "systemd", "state": "inactive", "status": "static" }, "man-db-restart-cache-update.service": { "name": "man-db-restart-cache-update.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "mdadm-grow-continue@.service": { "name": "mdadm-grow-continue@.service", "source": "systemd", "state": "unknown", "status": "static" }, "mdadm-last-resort@.service": { "name": "mdadm-last-resort@.service", "source": "systemd", "state": "unknown", "status": "static" }, "mdcheck_continue.service": { "name": "mdcheck_continue.service", "source": "systemd", "state": "inactive", "status": "static" }, "mdcheck_start.service": { "name": "mdcheck_start.service", "source": "systemd", "state": "inactive", "status": "static" }, "mdmon@.service": { "name": "mdmon@.service", "source": "systemd", "state": "unknown", "status": "static" }, "mdmonitor-oneshot.service": { "name": "mdmonitor-oneshot.service", "source": "systemd", "state": "inactive", "status": "static" }, "mdmonitor.service": { "name": "mdmonitor.service", "source": "systemd", "state": "stopped", "status": "enabled" }, "modprobe@.service": { "name": "modprobe@.service", "source": "systemd", "state": "unknown", "status": "static" }, "modprobe@configfs.service": { "name": "modprobe@configfs.service", "source": "systemd", "state": "stopped", "status": "inactive" }, "modprobe@dm_mod.service": { "name": "modprobe@dm_mod.service", "source": "systemd", "state": "stopped", "status": "inactive" }, "modprobe@drm.service": { "name": "modprobe@drm.service", "source": "systemd", "state": "stopped", "status": "inactive" }, "modprobe@efi_pstore.service": { "name": "modprobe@efi_pstore.service", "source": "systemd", "state": "stopped", "status": "inactive" }, "modprobe@fuse.service": { "name": "modprobe@fuse.service", "source": "systemd", "state": "stopped", "status": "inactive" }, "modprobe@loop.service": { "name": "modprobe@loop.service", "source": "systemd", "state": "stopped", "status": "inactive" }, "multipathd.service": { "name": "multipathd.service", "source": "systemd", "state": "stopped", "status": "enabled" }, "network.service": { "name": "network.service", "source": "systemd", "state": "stopped", "status": "not-found" }, "nfs-blkmap.service": { "name": "nfs-blkmap.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "nfs-idmapd.service": { "name": "nfs-idmapd.service", "source": "systemd", "state": "stopped", "status": "static" }, "nfs-mountd.service": { "name": "nfs-mountd.service", "source": "systemd", "state": "stopped", "status": "static" }, "nfs-server.service": { "name": "nfs-server.service", "source": "systemd", "state": "stopped", "status": "disabled" }, "nfs-utils.service": { "name": "nfs-utils.service", "source": "systemd", "state": "stopped", "status": "static" }, "nfsdcld.service": { "name": "nfsdcld.service", "source": "systemd", "state": "stopped", "status": "static" }, "nftables.service": { "name": "nftables.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "nis-domainname.service": { "name": "nis-domainname.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "nm-priv-helper.service": { "name": "nm-priv-helper.service", "source": "systemd", "state": "inactive", "status": "static" }, "ntpd.service": { "name": "ntpd.service", "source": "systemd", "state": "stopped", "status": "not-found" }, "ntpdate.service": { "name": "ntpdate.service", "source": "systemd", "state": "stopped", "status": "not-found" }, "pam_namespace.service": { "name": "pam_namespace.service", "source": "systemd", "state": "inactive", "status": "static" }, "pcscd.service": { "name": "pcscd.service", "source": "systemd", "state": "stopped", "status": "indirect" }, "plymouth-halt.service": { "name": "plymouth-halt.service", "source": "systemd", "state": "inactive", "status": "static" }, "plymouth-kexec.service": { "name": "plymouth-kexec.service", "source": "systemd", "state": "inactive", "status": "static" }, "plymouth-poweroff.service": { "name": "plymouth-poweroff.service", "source": "systemd", "state": "inactive", "status": "static" }, "plymouth-quit-wait.service": { "name": "plymouth-quit-wait.service", "source": "systemd", "state": "stopped", "status": "static" }, "plymouth-quit.service": { "name": "plymouth-quit.service", "source": "systemd", "state": "stopped", "status": "static" }, "plymouth-read-write.service": { "name": "plymouth-read-write.service", "source": "systemd", "state": "stopped", "status": "static" }, "plymouth-reboot.service": { "name": "plymouth-reboot.service", "source": "systemd", "state": "inactive", "status": "static" }, "plymouth-start.service": { "name": "plymouth-start.service", "source": "systemd", "state": "stopped", "status": "static" }, "plymouth-switch-root-initramfs.service": { "name": "plymouth-switch-root-initramfs.service", "source": "systemd", "state": "inactive", "status": "static" }, "plymouth-switch-root.service": { "name": "plymouth-switch-root.service", "source": "systemd", "state": "stopped", "status": "static" }, "polkit.service": { "name": "polkit.service", "source": "systemd", "state": "inactive", "status": "static" }, "quotaon.service": { "name": "quotaon.service", "source": "systemd", "state": "inactive", "status": "static" }, "raid-check.service": { "name": "raid-check.service", "source": "systemd", "state": "stopped", "status": "static" }, "rbdmap.service": { "name": "rbdmap.service", "source": "systemd", "state": "stopped", "status": "not-found" }, "rc-local.service": { "name": "rc-local.service", "source": "systemd", "state": "stopped", "status": "static" }, "rescue.service": { "name": "rescue.service", "source": "systemd", "state": "stopped", "status": "static" }, "restraintd.service": { "name": "restraintd.service", "source": "systemd", "state": "running", "status": "enabled" }, "rngd.service": { "name": "rngd.service", "source": "systemd", "state": "running", "status": "enabled" }, "rpc-gssd.service": { "name": "rpc-gssd.service", "source": "systemd", "state": "stopped", "status": "static" }, "rpc-statd-notify.service": { "name": "rpc-statd-notify.service", "source": "systemd", "state": "stopped", "status": "static" }, "rpc-statd.service": { "name": "rpc-statd.service", "source": "systemd", "state": "stopped", "status": "static" }, "rpc-svcgssd.service": { "name": "rpc-svcgssd.service", "source": "systemd", "state": "stopped", "status": "not-found" }, "rpcbind.service": { "name": "rpcbind.service", "source": "systemd", "state": "stopped", "status": "disabled" }, "rpmdb-migrate.service": { "name": "rpmdb-migrate.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "rpmdb-rebuild.service": { "name": "rpmdb-rebuild.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "selinux-autorelabel-mark.service": { "name": "selinux-autorelabel-mark.service", "source": "systemd", "state": "stopped", "status": "enabled" }, "selinux-autorelabel.service": { "name": "selinux-autorelabel.service", "source": "systemd", "state": "inactive", "status": "static" }, "selinux-check-proper-disable.service": { "name": "selinux-check-proper-disable.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "serial-getty@.service": { "name": "serial-getty@.service", "source": "systemd", "state": "unknown", "status": "indirect" }, "serial-getty@ttyS0.service": { "name": "serial-getty@ttyS0.service", "source": "systemd", "state": "running", "status": "active" }, "snapd.seeded.service": { "name": "snapd.seeded.service", "source": "systemd", "state": "stopped", "status": "not-found" }, "sntp.service": { "name": "sntp.service", "source": "systemd", "state": "stopped", "status": "not-found" }, "ssh-host-keys-migration.service": { "name": "ssh-host-keys-migration.service", "source": "systemd", "state": "stopped", "status": "disabled" }, "sshd-keygen.service": { "name": "sshd-keygen.service", "source": "systemd", "state": "stopped", "status": "not-found" }, "sshd-keygen@.service": { "name": "sshd-keygen@.service", "source": "systemd", "state": "unknown", "status": "disabled" }, "sshd-keygen@ecdsa.service": { "name": "sshd-keygen@ecdsa.service", "source": "systemd", "state": "stopped", "status": "inactive" }, "sshd-keygen@ed25519.service": { "name": "sshd-keygen@ed25519.service", "source": "systemd", "state": "stopped", "status": "inactive" }, "sshd-keygen@rsa.service": { "name": "sshd-keygen@rsa.service", "source": "systemd", "state": "stopped", "status": "inactive" }, "sshd.service": { "name": "sshd.service", "source": "systemd", "state": "running", "status": "enabled" }, "sshd@.service": { "name": "sshd@.service", "source": "systemd", "state": "unknown", "status": "static" }, "sssd-autofs.service": { "name": "sssd-autofs.service", "source": "systemd", "state": "inactive", "status": "indirect" }, "sssd-kcm.service": { "name": "sssd-kcm.service", "source": "systemd", "state": "stopped", "status": "indirect" }, "sssd-nss.service": { "name": "sssd-nss.service", "source": "systemd", "state": "inactive", "status": "indirect" }, "sssd-pac.service": { "name": "sssd-pac.service", "source": "systemd", "state": "inactive", "status": "indirect" }, "sssd-pam.service": { "name": "sssd-pam.service", "source": "systemd", "state": "inactive", "status": "indirect" }, "sssd-ssh.service": { "name": "sssd-ssh.service", "source": "systemd", "state": "inactive", "status": "indirect" }, "sssd-sudo.service": { "name": "sssd-sudo.service", "source": "systemd", "state": "inactive", "status": "indirect" }, "sssd.service": { "name": "sssd.service", "source": "systemd", "state": "stopped", "status": "enabled" }, "stratis-fstab-setup@.service": { "name": "stratis-fstab-setup@.service", "source": "systemd", "state": "unknown", "status": "static" }, "stratisd-min-postinitrd.service": { "name": "stratisd-min-postinitrd.service", "source": "systemd", "state": "inactive", "status": "static" }, "stratisd.service": { "name": "stratisd.service", "source": "systemd", "state": "stopped", "status": "enabled" }, "syslog.service": { "name": "syslog.service", "source": "systemd", "state": "stopped", "status": "not-found" }, "system-update-cleanup.service": { "name": "system-update-cleanup.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-ask-password-console.service": { "name": "systemd-ask-password-console.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-ask-password-plymouth.service": { "name": "systemd-ask-password-plymouth.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-ask-password-wall.service": { "name": "systemd-ask-password-wall.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-backlight@.service": { "name": "systemd-backlight@.service", "source": "systemd", "state": "unknown", "status": "static" }, "systemd-battery-check.service": { "name": "systemd-battery-check.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-binfmt.service": { "name": "systemd-binfmt.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-bless-boot.service": { "name": "systemd-bless-boot.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-boot-check-no-failures.service": { "name": "systemd-boot-check-no-failures.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "systemd-boot-random-seed.service": { "name": "systemd-boot-random-seed.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-boot-update.service": { "name": "systemd-boot-update.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "systemd-confext.service": { "name": "systemd-confext.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "systemd-coredump@.service": { "name": "systemd-coredump@.service", "source": "systemd", "state": "unknown", "status": "static" }, "systemd-exit.service": { "name": "systemd-exit.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-firstboot.service": { "name": "systemd-firstboot.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-fsck-root.service": { "name": "systemd-fsck-root.service", "source": "systemd", "state": "stopped", "status": "enabled-runtime" }, "systemd-fsck@.service": { "name": "systemd-fsck@.service", "source": "systemd", "state": "unknown", "status": "static" }, "systemd-growfs-root.service": { "name": "systemd-growfs-root.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-growfs@.service": { "name": "systemd-growfs@.service", "source": "systemd", "state": "unknown", "status": "static" }, "systemd-halt.service": { "name": "systemd-halt.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-hibernate.service": { "name": "systemd-hibernate.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-homed-activate.service": { "name": "systemd-homed-activate.service", "source": "systemd", "state": "stopped", "status": "enabled" }, "systemd-homed.service": { "name": "systemd-homed.service", "source": "systemd", "state": "running", "status": "enabled" }, "systemd-hostnamed.service": { "name": "systemd-hostnamed.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-hwdb-update.service": { "name": "systemd-hwdb-update.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-hybrid-sleep.service": { "name": "systemd-hybrid-sleep.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-initctl.service": { "name": "systemd-initctl.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-journal-catalog-update.service": { "name": "systemd-journal-catalog-update.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-journal-flush.service": { "name": "systemd-journal-flush.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-journald.service": { "name": "systemd-journald.service", "source": "systemd", "state": "running", "status": "static" }, "systemd-journald@.service": { "name": "systemd-journald@.service", "source": "systemd", "state": "unknown", "status": "static" }, "systemd-kexec.service": { "name": "systemd-kexec.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-localed.service": { "name": "systemd-localed.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-logind.service": { "name": "systemd-logind.service", "source": "systemd", "state": "running", "status": "static" }, "systemd-machine-id-commit.service": { "name": "systemd-machine-id-commit.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-modules-load.service": { "name": "systemd-modules-load.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-network-generator.service": { "name": "systemd-network-generator.service", "source": "systemd", "state": "stopped", "status": "enabled" }, "systemd-networkd-wait-online.service": { "name": "systemd-networkd-wait-online.service", "source": "systemd", "state": "stopped", "status": "disabled" }, "systemd-networkd-wait-online@.service": { "name": "systemd-networkd-wait-online@.service", "source": "systemd", "state": "unknown", "status": "disabled" }, "systemd-networkd.service": { "name": "systemd-networkd.service", "source": "systemd", "state": "stopped", "status": "disabled" }, "systemd-oomd.service": { "name": "systemd-oomd.service", "source": "systemd", "state": "running", "status": "enabled" }, "systemd-pcrfs-root.service": { "name": "systemd-pcrfs-root.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-pcrfs@.service": { "name": "systemd-pcrfs@.service", "source": "systemd", "state": "unknown", "status": "static" }, "systemd-pcrmachine.service": { "name": "systemd-pcrmachine.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-pcrphase-initrd.service": { "name": "systemd-pcrphase-initrd.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-pcrphase-sysinit.service": { "name": "systemd-pcrphase-sysinit.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-pcrphase.service": { "name": "systemd-pcrphase.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-portabled.service": { "name": "systemd-portabled.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-poweroff.service": { "name": "systemd-poweroff.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-pstore.service": { "name": "systemd-pstore.service", "source": "systemd", "state": "stopped", "status": "enabled" }, "systemd-quotacheck.service": { "name": "systemd-quotacheck.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-random-seed.service": { "name": "systemd-random-seed.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-reboot.service": { "name": "systemd-reboot.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-remount-fs.service": { "name": "systemd-remount-fs.service", "source": "systemd", "state": "stopped", "status": "enabled-runtime" }, "systemd-repart.service": { "name": "systemd-repart.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-resolved.service": { "name": "systemd-resolved.service", "source": "systemd", "state": "running", "status": "enabled" }, "systemd-rfkill.service": { "name": "systemd-rfkill.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-soft-reboot.service": { "name": "systemd-soft-reboot.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-suspend-then-hibernate.service": { "name": "systemd-suspend-then-hibernate.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-suspend.service": { "name": "systemd-suspend.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-sysctl.service": { "name": "systemd-sysctl.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-sysext.service": { "name": "systemd-sysext.service", "source": "systemd", "state": "stopped", "status": "disabled" }, "systemd-sysupdate-reboot.service": { "name": "systemd-sysupdate-reboot.service", "source": "systemd", "state": "inactive", "status": "indirect" }, "systemd-sysupdate.service": { "name": "systemd-sysupdate.service", "source": "systemd", "state": "inactive", "status": "indirect" }, "systemd-sysusers.service": { "name": "systemd-sysusers.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-time-wait-sync.service": { "name": "systemd-time-wait-sync.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "systemd-timedated.service": { "name": "systemd-timedated.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-timesyncd.service": { "name": "systemd-timesyncd.service", "source": "systemd", "state": "stopped", "status": "disabled" }, "systemd-tmpfiles-clean.service": { "name": "systemd-tmpfiles-clean.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-tmpfiles-setup-dev-early.service": { "name": "systemd-tmpfiles-setup-dev-early.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-tmpfiles-setup-dev.service": { "name": "systemd-tmpfiles-setup-dev.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-tmpfiles-setup.service": { "name": "systemd-tmpfiles-setup.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-udev-settle.service": { "name": "systemd-udev-settle.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-udev-trigger.service": { "name": "systemd-udev-trigger.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-udevd.service": { "name": "systemd-udevd.service", "source": "systemd", "state": "running", "status": "static" }, "systemd-update-done.service": { "name": "systemd-update-done.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-update-utmp-runlevel.service": { "name": "systemd-update-utmp-runlevel.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-update-utmp.service": { "name": "systemd-update-utmp.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-user-sessions.service": { "name": "systemd-user-sessions.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-userdbd.service": { "name": "systemd-userdbd.service", "source": "systemd", "state": "running", "status": "indirect" }, "systemd-vconsole-setup.service": { "name": "systemd-vconsole-setup.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-volatile-root.service": { "name": "systemd-volatile-root.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-zram-setup@.service": { "name": "systemd-zram-setup@.service", "source": "systemd", "state": "unknown", "status": "static" }, "systemd-zram-setup@zram0.service": { "name": "systemd-zram-setup@zram0.service", "source": "systemd", "state": "stopped", "status": "active" }, "udisks2.service": { "name": "udisks2.service", "source": "systemd", "state": "stopped", "status": "enabled" }, "unbound-anchor.service": { "name": "unbound-anchor.service", "source": "systemd", "state": "stopped", "status": "static" }, "user-runtime-dir@.service": { "name": "user-runtime-dir@.service", "source": "systemd", "state": "unknown", "status": "static" }, "user-runtime-dir@0.service": { "name": "user-runtime-dir@0.service", "source": "systemd", "state": "stopped", "status": "active" }, "user@.service": { "name": "user@.service", "source": "systemd", "state": "unknown", "status": "static" }, "user@0.service": { "name": "user@0.service", "source": "systemd", "state": "running", "status": "active" } } }, "changed": false } TASK [fedora.linux_system_roles.storage : Set storage_cryptsetup_services] ***** Thursday 25 July 2024 07:00:53 -0400 (0:00:02.397) 0:00:09.322 ********* ok: [managed_node1] => { "ansible_facts": { "storage_cryptsetup_services": [] }, "changed": false } TASK [fedora.linux_system_roles.storage : Mask the systemd cryptsetup services] *** Thursday 25 July 2024 07:00:53 -0400 (0:00:00.055) 0:00:09.378 ********* skipping: [managed_node1] => { "changed": false, "skipped_reason": "No items in the list" } TASK [fedora.linux_system_roles.storage : Manage the pools and volumes to match the specified state] *** Thursday 25 July 2024 07:00:53 -0400 (0:00:00.022) 0:00:09.400 ********* ok: [managed_node1] => { "actions": [], "changed": false, "crypts": [], "leaves": [], "mounts": [], "packages": [], "pools": [], "volumes": [] } TASK [fedora.linux_system_roles.storage : Workaround for udev issue on some platforms] *** Thursday 25 July 2024 07:00:53 -0400 (0:00:00.617) 0:00:10.017 ********* skipping: [managed_node1] => { "changed": false, "false_condition": "storage_udevadm_trigger | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.storage : Check if /etc/fstab is present] ****** Thursday 25 July 2024 07:00:53 -0400 (0:00:00.031) 0:00:10.048 ********* ok: [managed_node1] => { "changed": false, "stat": { "atime": 1721904786.802402, "attr_flags": "e", "attributes": [ "extents" ], "block_size": 4096, "blocks": 8, "charset": "us-ascii", "checksum": "b5e855a57e721b6145fa3073b7d52a782c7cc353", "ctime": 1721812896.4059312, "dev": 51714, "device_type": 0, "executable": false, "exists": true, "gid": 0, "gr_name": "root", "inode": 131080, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mimetype": "text/plain", "mode": "0644", "mtime": 1721812896.4059312, "nlink": 1, "path": "/etc/fstab", "pw_name": "root", "readable": true, "rgrp": true, "roth": true, "rusr": true, "size": 1344, "uid": 0, "version": "140625276", "wgrp": false, "woth": false, "writeable": true, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } } TASK [fedora.linux_system_roles.storage : Add fingerprint to /etc/fstab if present] *** Thursday 25 July 2024 07:00:54 -0400 (0:00:00.417) 0:00:10.466 ********* skipping: [managed_node1] => { "changed": false, "false_condition": "blivet_output is changed", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.storage : Unmask the systemd cryptsetup services] *** Thursday 25 July 2024 07:00:54 -0400 (0:00:00.031) 0:00:10.497 ********* skipping: [managed_node1] => { "changed": false, "skipped_reason": "No items in the list" } TASK [fedora.linux_system_roles.storage : Show blivet_output] ****************** Thursday 25 July 2024 07:00:54 -0400 (0:00:00.021) 0:00:10.518 ********* ok: [managed_node1] => { "blivet_output": { "actions": [], "changed": false, "crypts": [], "failed": false, "leaves": [], "mounts": [], "packages": [], "pools": [], "volumes": [] } } TASK [fedora.linux_system_roles.storage : Set the list of pools for test verification] *** Thursday 25 July 2024 07:00:54 -0400 (0:00:00.028) 0:00:10.547 ********* ok: [managed_node1] => { "ansible_facts": { "_storage_pools_list": [] }, "changed": false } TASK [fedora.linux_system_roles.storage : Set the list of volumes for test verification] *** Thursday 25 July 2024 07:00:54 -0400 (0:00:00.027) 0:00:10.575 ********* ok: [managed_node1] => { "ansible_facts": { "_storage_volumes_list": [] }, "changed": false } TASK [fedora.linux_system_roles.storage : Remove obsolete mounts] ************** Thursday 25 July 2024 07:00:54 -0400 (0:00:00.028) 0:00:10.603 ********* skipping: [managed_node1] => { "changed": false, "skipped_reason": "No items in the list" } TASK [fedora.linux_system_roles.storage : Tell systemd to refresh its view of /etc/fstab] *** Thursday 25 July 2024 07:00:54 -0400 (0:00:00.030) 0:00:10.634 ********* skipping: [managed_node1] => { "changed": false, "false_condition": "blivet_output['mounts']", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.storage : Set up new/current mounts] *********** Thursday 25 July 2024 07:00:54 -0400 (0:00:00.024) 0:00:10.659 ********* skipping: [managed_node1] => { "changed": false, "skipped_reason": "No items in the list" } TASK [fedora.linux_system_roles.storage : Manage mount ownership/permissions] *** Thursday 25 July 2024 07:00:54 -0400 (0:00:00.032) 0:00:10.691 ********* skipping: [managed_node1] => { "changed": false, "skipped_reason": "No items in the list" } TASK [fedora.linux_system_roles.storage : Tell systemd to refresh its view of /etc/fstab] *** Thursday 25 July 2024 07:00:54 -0400 (0:00:00.031) 0:00:10.723 ********* skipping: [managed_node1] => { "changed": false, "false_condition": "blivet_output['mounts']", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.storage : Retrieve facts for the /etc/crypttab file] *** Thursday 25 July 2024 07:00:54 -0400 (0:00:00.022) 0:00:10.746 ********* ok: [managed_node1] => { "changed": false, "stat": { "atime": 1721905088.8393722, "attr_flags": "e", "attributes": [ "extents" ], "block_size": 4096, "blocks": 0, "charset": "binary", "checksum": "da39a3ee5e6b4b0d3255bfef95601890afd80709", "ctime": 1721812099.727, "dev": 51714, "device_type": 0, "executable": false, "exists": true, "gid": 0, "gr_name": "root", "inode": 131081, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mimetype": "inode/x-empty", "mode": "0600", "mtime": 1721811598.416, "nlink": 1, "path": "/etc/crypttab", "pw_name": "root", "readable": true, "rgrp": false, "roth": false, "rusr": true, "size": 0, "uid": 0, "version": "3300739401", "wgrp": false, "woth": false, "writeable": true, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } } TASK [fedora.linux_system_roles.storage : Manage /etc/crypttab to account for changes we just made] *** Thursday 25 July 2024 07:00:55 -0400 (0:00:00.412) 0:00:11.158 ********* skipping: [managed_node1] => { "changed": false, "skipped_reason": "No items in the list" } TASK [fedora.linux_system_roles.storage : Update facts] ************************ Thursday 25 July 2024 07:00:55 -0400 (0:00:00.021) 0:00:11.180 ********* ok: [managed_node1] TASK [Mark tasks to be skipped] ************************************************ Thursday 25 July 2024 07:00:56 -0400 (0:00:00.962) 0:00:12.142 ********* ok: [managed_node1] => { "ansible_facts": { "storage_skip_checks": [ "blivet_available", "packages_installed", "service_facts" ] }, "changed": false } TASK [Get unused disks for test] *********************************************** Thursday 25 July 2024 07:00:56 -0400 (0:00:00.036) 0:00:12.178 ********* included: /var/ARTIFACTS/work-generalqrud9m2m/plans/general/tree/tmp.Q7l4y5p4BI/ansible_collections/fedora/linux_system_roles/tests/storage/get_unused_disk.yml for managed_node1 TASK [Ensure test packages] **************************************************** Thursday 25 July 2024 07:00:56 -0400 (0:00:00.042) 0:00:12.221 ********* ok: [managed_node1] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do lsrpackages: util-linux-core TASK [Find unused disks in the system] ***************************************** Thursday 25 July 2024 07:00:58 -0400 (0:00:01.839) 0:00:14.061 ********* ok: [managed_node1] => { "changed": false, "disks": "Unable to find unused disk", "info": [ "Line: NAME=\"/dev/xvda\" TYPE=\"disk\" SIZE=\"268435456000\" FSTYPE=\"\" LOG-SEC=\"512\"", "Line: NAME=\"/dev/xvda1\" TYPE=\"part\" SIZE=\"1048576\" FSTYPE=\"\" LOG-SEC=\"512\"", "Line type [part] is not disk: NAME=\"/dev/xvda1\" TYPE=\"part\" SIZE=\"1048576\" FSTYPE=\"\" LOG-SEC=\"512\"", "Line: NAME=\"/dev/xvda2\" TYPE=\"part\" SIZE=\"268433341952\" FSTYPE=\"ext4\" LOG-SEC=\"512\"", "Line type [part] is not disk: NAME=\"/dev/xvda2\" TYPE=\"part\" SIZE=\"268433341952\" FSTYPE=\"ext4\" LOG-SEC=\"512\"", "Line: NAME=\"/dev/zram0\" TYPE=\"disk\" SIZE=\"3897556992\" FSTYPE=\"\" LOG-SEC=\"4096\"", "filename [xvda2] is a partition", "filename [xvda1] is a partition", "Disk [/dev/xvda] attrs [{'type': 'disk', 'size': '268435456000', 'fstype': '', 'ssize': '512'}] has partitions", "Disk [/dev/zram0] attrs [{'type': 'disk', 'size': '3897556992', 'fstype': '', 'ssize': '4096'}] size is less than requested" ] } TASK [Debug why there are no unused disks] ************************************* Thursday 25 July 2024 07:00:58 -0400 (0:00:00.611) 0:00:14.672 ********* ok: [managed_node1] => { "changed": false, "cmd": "set -x\nexec 1>&2\nlsblk -p --pairs --bytes -o NAME,TYPE,SIZE,FSTYPE,LOG-SEC\njournalctl -ex\n", "delta": "0:00:00.038498", "end": "2024-07-25 07:00:59.134955", "rc": 0, "start": "2024-07-25 07:00:59.096457" } STDERR: + exec + lsblk -p --pairs --bytes -o NAME,TYPE,SIZE,FSTYPE,LOG-SEC NAME="/dev/xvda" TYPE="disk" SIZE="268435456000" FSTYPE="" LOG-SEC="512" NAME="/dev/xvda1" TYPE="part" SIZE="1048576" FSTYPE="" LOG-SEC="512" NAME="/dev/xvda2" TYPE="part" SIZE="268433341952" FSTYPE="ext4" LOG-SEC="512" NAME="/dev/zram0" TYPE="disk" SIZE="3897556992" FSTYPE="" LOG-SEC="4096" + journalctl -ex Jul 25 07:00:26 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:26 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:26 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=16025 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:26 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:26 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:26 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:26 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:26 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=16041 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=16063 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=16079 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=16096 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16114]: USER_ACCT pid=16114 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[16114]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-dpjpykpqevmmcijulvknbmwmcwhnzolt ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905226.9741824-5937-279190927035188/AnsiballZ_stat.py' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16114]: USER_CMD pid=16114 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64706A70796B707165766D6D63696A756C766B6E626D776D6377686E7A6F6C74203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353232362E393734313832342D353933372D3237393139303932373033353138382F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16114]: CRED_REFR pid=16114 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[16114]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16114]: USER_START pid=16114 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[16116]: ansible-stat Invoked with path=/run/ostree-booted follow=False get_checksum=True get_mime=True get_attributes=True checksum_algorithm=sha1 Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16114]: USER_END pid=16114 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[16114]: pam_unix(sudo:session): session closed for user root Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16114]: CRED_DISP pid=16114 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=16117 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=16134 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=16150 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=16172 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=16188 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=16205 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16223]: USER_ACCT pid=16223 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[16223]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-qrugpbxfwtwwkqfilhewbobzkgornkup ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905227.6422384-5949-196419781126793/AnsiballZ_dnf.py' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16223]: USER_CMD pid=16223 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7172756770627866777477776B7166696C686577626F627A6B676F726E6B7570203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353232372E363432323338342D353934392D3139363431393738313132363739332F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16223]: CRED_REFR pid=16223 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[16223]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:00:27 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16223]: USER_START pid=16223 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:28 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[16225]: ansible-ansible.legacy.dnf Invoked with name=['python3-blivet', 'libblockdev-crypto', 'libblockdev-dm', 'libblockdev-lvm', 'libblockdev-mdraid', 'libblockdev-swap', 'stratisd', 'stratis-cli'] state=present allow_downgrade=False allowerasing=False autoremove=False bugfix=False cacheonly=False disable_gpg_check=False disable_plugin=[] disablerepo=[] download_only=False enable_plugin=[] enablerepo=[] exclude=[] installroot=/ install_repoquery=True install_weak_deps=True security=False skip_broken=False update_cache=False update_only=False validate_certs=True sslverify=True lock_timeout=30 use_backend=auto best=None conf_file=None disable_excludes=None download_dir=None list=None nobest=None releasever=None Jul 25 07:00:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16223]: USER_END pid=16223 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:29 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[16223]: pam_unix(sudo:session): session closed for user root Jul 25 07:00:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16223]: CRED_DISP pid=16223 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=16227 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=16244 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=16260 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=16282 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=16298 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=16315 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16333]: USER_ACCT pid=16333 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:29 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[16333]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-pzzmgcumophtbwjufhiekgcvrhhetynp ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905229.6642935-5959-277918844244680/AnsiballZ_blivet.py' Jul 25 07:00:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16333]: USER_CMD pid=16333 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D707A7A6D6763756D6F70687462776A75666869656B6763767268686574796E70203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353232392E363634323933352D353935392D3237373931383834343234343638302F416E736962616C6C5A5F626C697665742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:00:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16333]: CRED_REFR pid=16333 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:29 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[16333]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:00:29 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16333]: USER_START pid=16333 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:30 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[16335]: ansible-fedora.linux_system_roles.blivet Invoked with pools=[] volumes=[] use_partitions=None disklabel_type=None pool_defaults={'state': 'present', 'type': 'lvm', 'disks': [], 'volumes': [], 'grow_to_fill': False, 'encryption': False, 'encryption_password': None, 'encryption_key': None, 'encryption_cipher': None, 'encryption_key_size': None, 'encryption_luks_version': None, 'raid_level': None, 'raid_device_count': None, 'raid_spare_count': None, 'raid_chunk_size': None, 'raid_metadata_version': None, 'shared': False} volume_defaults={'state': 'present', 'type': 'lvm', 'size': 0, 'disks': [], 'fs_type': 'xfs', 'fs_label': '', 'fs_create_options': '', 'fs_overwrite_existing': True, 'mount_point': '', 'mount_options': 'defaults', 'mount_check': 0, 'mount_passno': 0, 'mount_device_identifier': 'uuid', 'raid_level': None, 'raid_device_count': None, 'raid_spare_count': None, 'raid_chunk_size': None, 'raid_stripe_size': None, 'raid_metadata_version': None, 'encryption': False, 'encryption_password': None, 'encryption_key': None, 'encryption_cipher': None, 'encryption_key_size': None, 'encryption_luks_version': None, 'compression': None, 'deduplication': None, 'vdo_pool_size': None, 'thin': None, 'thin_pool_name': None, 'thin_pool_size': None, 'cached': False, 'cache_size': 0, 'cache_mode': None, 'cache_devices': []} packages_only=True safe_mode=True diskvolume_mkfs_option_map={} Jul 25 07:00:30 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[16333]: pam_unix(sudo:session): session closed for user root Jul 25 07:00:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16333]: USER_END pid=16333 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16333]: CRED_DISP pid=16333 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=16339 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=16356 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=16372 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=16394 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=16410 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=16427 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16445]: USER_ACCT pid=16445 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:30 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[16445]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-cwcdwlwwocsfxxemizlxdtdfjjspcdfb ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905230.5836933-5971-6592491460051/AnsiballZ_dnf.py' Jul 25 07:00:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16445]: USER_CMD pid=16445 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63776364776C77776F6373667878656D697A6C78647464666A6A737063646662203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353233302E353833363933332D353937312D363539323439313436303035312F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:00:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16445]: CRED_REFR pid=16445 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:30 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[16445]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:00:30 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16445]: USER_START pid=16445 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:30 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[16447]: ansible-ansible.legacy.dnf Invoked with name=['kpartx'] state=present allow_downgrade=False allowerasing=False autoremove=False bugfix=False cacheonly=False disable_gpg_check=False disable_plugin=[] disablerepo=[] download_only=False enable_plugin=[] enablerepo=[] exclude=[] installroot=/ install_repoquery=True install_weak_deps=True security=False skip_broken=False update_cache=False update_only=False validate_certs=True sslverify=True lock_timeout=30 use_backend=auto best=None conf_file=None disable_excludes=None download_dir=None list=None nobest=None releasever=None Jul 25 07:00:32 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16445]: USER_END pid=16445 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:32 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16445]: CRED_DISP pid=16445 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:32 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[16445]: pam_unix(sudo:session): session closed for user root Jul 25 07:00:32 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:32 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:32 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:32 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:32 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=16449 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:32 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:32 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:32 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:32 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:32 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=16466 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:32 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:32 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:32 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:32 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:32 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=16482 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:32 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:32 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:32 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:32 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:32 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=16504 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:32 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:32 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:32 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:32 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:32 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=16520 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:32 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:32 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:32 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:32 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:32 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=16537 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:32 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16555]: USER_ACCT pid=16555 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:32 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[16555]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-hsreqnhrvuyffswrowtonbvknbvpfvgt ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905232.3261025-5979-162816154454044/AnsiballZ_service_facts.py' Jul 25 07:00:32 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16555]: USER_CMD pid=16555 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68737265716E687276757966667377726F77746F6E62766B6E62767066766774203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353233322E333236313032352D353937392D3136323831363135343435343034342F416E736962616C6C5A5F736572766963655F66616374732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:00:32 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16555]: CRED_REFR pid=16555 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:32 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16555]: USER_START pid=16555 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:32 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[16555]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:00:32 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[16557]: ansible-service_facts Invoked Jul 25 07:00:34 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[16555]: pam_unix(sudo:session): session closed for user root Jul 25 07:00:34 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16555]: USER_END pid=16555 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:34 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16555]: CRED_DISP pid=16555 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:34 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:34 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:34 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:34 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:34 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=16668 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:34 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:34 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:34 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:34 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:34 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=16685 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:34 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:34 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:34 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:34 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:34 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=16701 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:34 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:34 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:34 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:34 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:34 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=16723 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:34 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:34 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:34 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:34 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:34 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=16739 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:34 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:34 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:34 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:34 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:34 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=16756 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:34 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16774]: USER_ACCT pid=16774 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:34 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16774]: USER_CMD pid=16774 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C7967687669697264687A626C7975716F7A6E787771717267636862746C6261203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353233342E383538393332352D353938392D36323530363932373430323836352F416E736962616C6C5A5F626C697665742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:00:34 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[16774]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-lyghviirdhzblyuqoznxwqqrgchbtlba ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905234.8589325-5989-62506927402865/AnsiballZ_blivet.py' Jul 25 07:00:34 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16774]: CRED_REFR pid=16774 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:34 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[16774]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:00:34 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16774]: USER_START pid=16774 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[16776]: ansible-fedora.linux_system_roles.blivet Invoked with pools=[] volumes=[] use_partitions=None disklabel_type=None pool_defaults={'state': 'present', 'type': 'lvm', 'disks': [], 'volumes': [], 'grow_to_fill': False, 'encryption': False, 'encryption_password': None, 'encryption_key': None, 'encryption_cipher': None, 'encryption_key_size': None, 'encryption_luks_version': None, 'raid_level': None, 'raid_device_count': None, 'raid_spare_count': None, 'raid_chunk_size': None, 'raid_metadata_version': None, 'shared': False} volume_defaults={'state': 'present', 'type': 'lvm', 'size': 0, 'disks': [], 'fs_type': 'xfs', 'fs_label': '', 'fs_create_options': '', 'fs_overwrite_existing': True, 'mount_point': '', 'mount_options': 'defaults', 'mount_check': 0, 'mount_passno': 0, 'mount_device_identifier': 'uuid', 'raid_level': None, 'raid_device_count': None, 'raid_spare_count': None, 'raid_chunk_size': None, 'raid_stripe_size': None, 'raid_metadata_version': None, 'encryption': False, 'encryption_password': None, 'encryption_key': None, 'encryption_cipher': None, 'encryption_key_size': None, 'encryption_luks_version': None, 'compression': None, 'deduplication': None, 'vdo_pool_size': None, 'thin': None, 'thin_pool_name': None, 'thin_pool_size': None, 'cached': False, 'cache_size': 0, 'cache_mode': None, 'cache_devices': []} safe_mode=False packages_only=False diskvolume_mkfs_option_map={} Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[16774]: pam_unix(sudo:session): session closed for user root Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16774]: USER_END pid=16774 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16774]: CRED_DISP pid=16774 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=16780 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=16797 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=16813 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=16835 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=16851 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=16868 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16886]: USER_ACCT pid=16886 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[16886]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-pwlvjenvyonsjlcqigzwyncxexullmxy ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905235.4955084-5998-226338594222024/AnsiballZ_stat.py' Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16886]: USER_CMD pid=16886 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70776C766A656E76796F6E736A6C637169677A77796E63786578756C6C6D7879203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353233352E343935353038342D353939382D3232363333383539343232323032342F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16886]: CRED_REFR pid=16886 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[16886]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16886]: USER_START pid=16886 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[16888]: ansible-stat Invoked with path=/etc/fstab follow=False get_checksum=True get_mime=True get_attributes=True checksum_algorithm=sha1 Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[16886]: pam_unix(sudo:session): session closed for user root Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16886]: USER_END pid=16886 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16886]: CRED_DISP pid=16886 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=16891 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:35 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=16908 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=16924 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=16946 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=16962 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=16979 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16997]: USER_ACCT pid=16997 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[16997]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-naopqrccyhypikpsraudwsckllgsasai ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905236.2080984-6016-235195121193613/AnsiballZ_stat.py' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16997]: USER_CMD pid=16997 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E616F707172636379687970696B7073726175647773636B6C6C677361736169203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353233362E323038303938342D363031362D3233353139353132313139333631332F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16997]: CRED_REFR pid=16997 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[16997]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16997]: USER_START pid=16997 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[16999]: ansible-stat Invoked with path=/etc/crypttab follow=False get_checksum=True get_mime=True get_attributes=True checksum_algorithm=sha1 Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16997]: USER_END pid=16997 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[16997]: pam_unix(sudo:session): session closed for user root Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[16997]: CRED_DISP pid=16997 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17002 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17019 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17035 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17057 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17073 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17090 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17108]: USER_ACCT pid=17108 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[17108]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-qdiajcjusjkteyyhwhowgyizfipzewau ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905236.6428008-6025-48427010158967/AnsiballZ_setup.py' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17108]: USER_CMD pid=17108 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716469616A636A75736A6B746579796877686F776779697A6669707A65776175203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353233362E363432383030382D363032352D34383432373031303135383936372F416E736962616C6C5A5F73657475702E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17108]: CRED_REFR pid=17108 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[17108]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:00:36 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17108]: USER_START pid=17108 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:37 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[17110]: ansible-setup Invoked with gather_subset=['all'] gather_timeout=10 filter=[] fact_path=/etc/ansible/facts.d Jul 25 07:00:37 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[17108]: pam_unix(sudo:session): session closed for user root Jul 25 07:00:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17108]: USER_END pid=17108 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17108]: CRED_DISP pid=17108 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17135 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17152 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17168 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17190 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17206 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17223 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17241]: USER_ACCT pid=17241 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:37 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[17241]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-dudwxgrrcqobszoibcxgzntdwahobigt ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905237.7034569-6035-158128648139147/AnsiballZ_dnf.py' Jul 25 07:00:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17241]: USER_CMD pid=17241 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D647564777867727263716F62737A6F69626378677A6E74647761686F62696774203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353233372E373033343536392D363033352D3135383132383634383133393134372F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:00:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17241]: CRED_REFR pid=17241 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:37 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[17241]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:00:37 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17241]: USER_START pid=17241 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:38 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[17243]: ansible-ansible.legacy.dnf Invoked with name=['util-linux-core'] state=present allow_downgrade=False allowerasing=False autoremove=False bugfix=False cacheonly=False disable_gpg_check=False disable_plugin=[] disablerepo=[] download_only=False enable_plugin=[] enablerepo=[] exclude=[] installroot=/ install_repoquery=True install_weak_deps=True security=False skip_broken=False update_cache=False update_only=False validate_certs=True sslverify=True lock_timeout=30 use_backend=auto best=None conf_file=None disable_excludes=None download_dir=None list=None nobest=None releasever=None Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[17241]: pam_unix(sudo:session): session closed for user root Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17241]: USER_END pid=17241 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17241]: CRED_DISP pid=17241 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17245 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17262 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17278 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17300 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17316 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17333 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17351]: USER_ACCT pid=17351 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[17351]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-jrgvjqdtawesxoupbdlpeobiohqdebut ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905239.4824092-6043-215901012091345/AnsiballZ_find_unused_disk.py' Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17351]: USER_CMD pid=17351 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A7267766A71647461776573786F757062646C70656F62696F68716465627574203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353233392E343832343039322D363034332D3231353930313031323039313334352F416E736962616C6C5A5F66696E645F756E757365645F6469736B2E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17351]: CRED_REFR pid=17351 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[17351]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17351]: USER_START pid=17351 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[17353]: ansible-fedora.linux_system_roles.find_unused_disk Invoked with min_size=10g max_return=1 max_size=0 match_sector_size=False with_interface=None Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[17351]: pam_unix(sudo:session): session closed for user root Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17351]: USER_END pid=17351 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17351]: CRED_DISP pid=17351 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17357 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:39 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17374 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17390 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17412 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17428 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17445 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17463]: USER_ACCT pid=17463 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17463]: USER_CMD pid=17463 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B67626C74716A716B7871786D77716F717A77656E696A63646F716C73797167203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353234302E3032313330322D363035312D3131353433323433373534303132362F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:00:40 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[17463]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-kgbltqjqkxqxmwqoqzwenijcdoqlsyqg ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905240.021302-6051-115432437540126/AnsiballZ_command.py' Jul 25 07:00:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17463]: CRED_REFR pid=17463 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:40 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[17463]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:00:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17463]: USER_START pid=17463 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:40 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[17465]: ansible-ansible.legacy.command Invoked with _raw_params=set -x exec 1>&2 lsblk -p --pairs --bytes -o NAME,TYPE,SIZE,FSTYPE,LOG-SEC journalctl -ex _uses_shell=True expand_argument_vars=True stdin_add_newline=True strip_empty_ends=True argv=None chdir=None executable=None creates=None removes=None stdin=None Jul 25 07:00:40 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[17463]: pam_unix(sudo:session): session closed for user root Jul 25 07:00:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17463]: USER_END pid=17463 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17463]: CRED_DISP pid=17463 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17468 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:40 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:43 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:43 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:43 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17485 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:44 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:44 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:44 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:44 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:44 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17501 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:44 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:44 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:44 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:44 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:44 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17523 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:44 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:44 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:44 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:44 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:44 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17541 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:44 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:44 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:44 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:44 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:44 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17558 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:44 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:44 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:44 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:44 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:44 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17574 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:44 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:44 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:44 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:44 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:44 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17591 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:44 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17609]: USER_ACCT pid=17609 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:44 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[17609]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-fpknlvenwjeqtutpxphxpacckesjwmwo ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905244.00639-6162-161192620644329/AnsiballZ_setup.py' Jul 25 07:00:44 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17609]: USER_CMD pid=17609 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66706B6E6C76656E776A65717475747078706878706163636B65736A776D776F203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353234342E30303633392D363136322D3136313139323632303634343332392F416E736962616C6C5A5F73657475702E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:00:44 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17609]: CRED_REFR pid=17609 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:44 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[17609]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:00:44 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17609]: USER_START pid=17609 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:44 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[17611]: ansible-ansible.legacy.setup Invoked with gather_subset=['all'] gather_timeout=10 filter=[] fact_path=/etc/ansible/facts.d Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[17609]: pam_unix(sudo:session): session closed for user root Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17609]: USER_END pid=17609 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17609]: CRED_DISP pid=17609 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17636 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17653 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17669 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17691 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17707 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17724 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17742]: USER_ACCT pid=17742 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[17742]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-bdnrzbbgvqrcyqlulrmifanxrdhejhcq ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905245.4849758-6176-186906084066897/AnsiballZ_stat.py' Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17742]: USER_CMD pid=17742 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62646E727A6262677671726379716C756C726D6966616E78726468656A686371203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353234352E343834393735382D363137362D3138363930363038343036363839372F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17742]: CRED_REFR pid=17742 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[17742]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17742]: USER_START pid=17742 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[17744]: ansible-stat Invoked with path=/run/ostree-booted follow=False get_checksum=True get_mime=True get_attributes=True checksum_algorithm=sha1 Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17742]: USER_END pid=17742 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[17742]: pam_unix(sudo:session): session closed for user root Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17742]: CRED_DISP pid=17742 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17745 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:45 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17762 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17778 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17800 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17816 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17833 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17851]: USER_ACCT pid=17851 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:46 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[17851]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-edgppsvusqbgjkrkhdtmoydkdfmnmtyb ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905246.1563122-6188-275283191603135/AnsiballZ_dnf.py' Jul 25 07:00:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17851]: USER_CMD pid=17851 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6564677070737675737162676A6B726B6864746D6F79646B64666D6E6D747962203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353234362E313536333132322D363138382D3237353238333139313630333133352F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:00:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17851]: CRED_REFR pid=17851 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:46 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[17851]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:00:46 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17851]: USER_START pid=17851 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:46 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[17853]: ansible-ansible.legacy.dnf Invoked with name=['python3-blivet', 'libblockdev-crypto', 'libblockdev-dm', 'libblockdev-lvm', 'libblockdev-mdraid', 'libblockdev-swap', 'stratisd', 'stratis-cli'] state=present allow_downgrade=False allowerasing=False autoremove=False bugfix=False cacheonly=False disable_gpg_check=False disable_plugin=[] disablerepo=[] download_only=False enable_plugin=[] enablerepo=[] exclude=[] installroot=/ install_repoquery=True install_weak_deps=True security=False skip_broken=False update_cache=False update_only=False validate_certs=True sslverify=True lock_timeout=30 use_backend=auto best=None conf_file=None disable_excludes=None download_dir=None list=None nobest=None releasever=None Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[17851]: pam_unix(sudo:session): session closed for user root Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17851]: USER_END pid=17851 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17851]: CRED_DISP pid=17851 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17855 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17872 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17888 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17910 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17926 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17943 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17961]: USER_ACCT pid=17961 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[17961]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-xbxfjgtveamjaqeaemwbacyvdxaqzuok ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905248.225843-6200-276691592071889/AnsiballZ_blivet.py' Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17961]: USER_CMD pid=17961 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786278666A67747665616D6A61716561656D776261637976647861717A756F6B203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353234382E3232353834332D363230302D3237363639313539323037313838392F416E736962616C6C5A5F626C697665742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17961]: CRED_REFR pid=17961 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[17961]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17961]: USER_START pid=17961 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[17963]: ansible-fedora.linux_system_roles.blivet Invoked with pools=[] volumes=[] use_partitions=None disklabel_type=None pool_defaults={'state': 'present', 'type': 'lvm', 'disks': [], 'volumes': [], 'grow_to_fill': False, 'encryption': False, 'encryption_password': None, 'encryption_key': None, 'encryption_cipher': None, 'encryption_key_size': None, 'encryption_luks_version': None, 'raid_level': None, 'raid_device_count': None, 'raid_spare_count': None, 'raid_chunk_size': None, 'raid_metadata_version': None, 'shared': False} volume_defaults={'state': 'present', 'type': 'lvm', 'size': 0, 'disks': [], 'fs_type': 'xfs', 'fs_label': '', 'fs_create_options': '', 'fs_overwrite_existing': True, 'mount_point': '', 'mount_options': 'defaults', 'mount_check': 0, 'mount_passno': 0, 'mount_device_identifier': 'uuid', 'raid_level': None, 'raid_device_count': None, 'raid_spare_count': None, 'raid_chunk_size': None, 'raid_stripe_size': None, 'raid_metadata_version': None, 'encryption': False, 'encryption_password': None, 'encryption_key': None, 'encryption_cipher': None, 'encryption_key_size': None, 'encryption_luks_version': None, 'compression': None, 'deduplication': None, 'vdo_pool_size': None, 'thin': None, 'thin_pool_name': None, 'thin_pool_size': None, 'cached': False, 'cache_size': 0, 'cache_mode': None, 'cache_devices': []} packages_only=True safe_mode=True diskvolume_mkfs_option_map={} Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[17961]: pam_unix(sudo:session): session closed for user root Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17961]: USER_END pid=17961 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[17961]: CRED_DISP pid=17961 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17967 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:48 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:49 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:49 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:49 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=17984 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:49 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:49 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:49 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:49 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:49 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=18000 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:49 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:49 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:49 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:49 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:49 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=18022 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:49 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:49 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:49 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:49 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:49 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=18038 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:49 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:49 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:49 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:49 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:49 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=18055 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:49 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18073]: USER_ACCT pid=18073 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:49 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18073]: USER_CMD pid=18073 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D7261776461716D7075716665796F65687773727561696A6E6D796969666D77203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353234392E313632363937332D363231322D31363737393935343636383030352F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:00:49 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[18073]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-mrawdaqmpuqfeyoehwsruaijnmyiifmw ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905249.1626973-6212-16779954668005/AnsiballZ_dnf.py' Jul 25 07:00:49 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18073]: CRED_REFR pid=18073 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:49 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[18073]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:00:49 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18073]: USER_START pid=18073 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:49 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[18075]: ansible-ansible.legacy.dnf Invoked with name=['kpartx'] state=present allow_downgrade=False allowerasing=False autoremove=False bugfix=False cacheonly=False disable_gpg_check=False disable_plugin=[] disablerepo=[] download_only=False enable_plugin=[] enablerepo=[] exclude=[] installroot=/ install_repoquery=True install_weak_deps=True security=False skip_broken=False update_cache=False update_only=False validate_certs=True sslverify=True lock_timeout=30 use_backend=auto best=None conf_file=None disable_excludes=None download_dir=None list=None nobest=None releasever=None Jul 25 07:00:50 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[18073]: pam_unix(sudo:session): session closed for user root Jul 25 07:00:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18073]: USER_END pid=18073 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18073]: CRED_DISP pid=18073 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=18077 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=18094 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=18110 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:50 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=18132 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=18148 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=18165 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18183]: USER_ACCT pid=18183 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:51 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[18183]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-ltiwxhdxsrmzubbfxovqolmpovvjryqv ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905250.9266913-6220-98280257843166/AnsiballZ_service_facts.py' Jul 25 07:00:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18183]: USER_CMD pid=18183 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C7469777868647873726D7A75626266786F76716F6C6D706F76766A72797176203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353235302E393236363931332D363232302D39383238303235373834333136362F416E736962616C6C5A5F736572766963655F66616374732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:00:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18183]: CRED_REFR pid=18183 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:51 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[18183]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:00:51 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18183]: USER_START pid=18183 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:51 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[18185]: ansible-service_facts Invoked Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[18183]: pam_unix(sudo:session): session closed for user root Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18183]: USER_END pid=18183 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18183]: CRED_DISP pid=18183 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=18296 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=18313 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=18329 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=18351 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=18367 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=18384 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18402]: USER_ACCT pid=18402 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[18402]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-srmfmqigqmllfirwltzcnwnxnmpnfppj ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905253.4106314-6230-17171933776689/AnsiballZ_blivet.py' Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18402]: USER_CMD pid=18402 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73726D666D716967716D6C6C666972776C747A636E776E786E6D706E6670706A203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353235332E343130363331342D363233302D31373137313933333737363638392F416E736962616C6C5A5F626C697665742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18402]: CRED_REFR pid=18402 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[18402]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18402]: USER_START pid=18402 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[18404]: ansible-fedora.linux_system_roles.blivet Invoked with pools=[] volumes=[] use_partitions=None disklabel_type=None pool_defaults={'state': 'present', 'type': 'lvm', 'disks': [], 'volumes': [], 'grow_to_fill': False, 'encryption': False, 'encryption_password': None, 'encryption_key': None, 'encryption_cipher': None, 'encryption_key_size': None, 'encryption_luks_version': None, 'raid_level': None, 'raid_device_count': None, 'raid_spare_count': None, 'raid_chunk_size': None, 'raid_metadata_version': None, 'shared': False} volume_defaults={'state': 'present', 'type': 'lvm', 'size': 0, 'disks': [], 'fs_type': 'xfs', 'fs_label': '', 'fs_create_options': '', 'fs_overwrite_existing': True, 'mount_point': '', 'mount_options': 'defaults', 'mount_check': 0, 'mount_passno': 0, 'mount_device_identifier': 'uuid', 'raid_level': None, 'raid_device_count': None, 'raid_spare_count': None, 'raid_chunk_size': None, 'raid_stripe_size': None, 'raid_metadata_version': None, 'encryption': False, 'encryption_password': None, 'encryption_key': None, 'encryption_cipher': None, 'encryption_key_size': None, 'encryption_luks_version': None, 'compression': None, 'deduplication': None, 'vdo_pool_size': None, 'thin': None, 'thin_pool_name': None, 'thin_pool_size': None, 'cached': False, 'cache_size': 0, 'cache_mode': None, 'cache_devices': []} safe_mode=False packages_only=False diskvolume_mkfs_option_map={} Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18402]: USER_END pid=18402 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[18402]: pam_unix(sudo:session): session closed for user root Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18402]: CRED_DISP pid=18402 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=18408 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:53 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=18425 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=18441 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=18463 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=18479 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=18496 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18514]: USER_ACCT pid=18514 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[18514]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-zwrpexncyqaksvbjygmsepflpzahrwnj ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905254.043564-6239-139142181161838/AnsiballZ_stat.py' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18514]: USER_CMD pid=18514 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A77727065786E637971616B7376626A79676D736570666C707A616872776E6A203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353235342E3034333536342D363233392D3133393134323138313136313833382F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18514]: CRED_REFR pid=18514 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18514]: USER_START pid=18514 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[18514]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[18516]: ansible-stat Invoked with path=/etc/fstab follow=False get_checksum=True get_mime=True get_attributes=True checksum_algorithm=sha1 Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[18514]: pam_unix(sudo:session): session closed for user root Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18514]: USER_END pid=18514 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18514]: CRED_DISP pid=18514 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=18519 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=18536 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=18552 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=18574 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=18590 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=18607 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18625]: USER_ACCT pid=18625 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[18625]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-zyaetyaxqkkixzaoayvsczvwyzehmjdm ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905254.742686-6257-130655626130077/AnsiballZ_stat.py' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18625]: USER_CMD pid=18625 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A79616574796178716B6B69787A616F61797673637A7677797A65686D6A646D203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353235342E3734323638362D363235372D3133303635353632363133303037372F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18625]: CRED_REFR pid=18625 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[18625]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:00:54 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18625]: USER_START pid=18625 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:55 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[18627]: ansible-stat Invoked with path=/etc/crypttab follow=False get_checksum=True get_mime=True get_attributes=True checksum_algorithm=sha1 Jul 25 07:00:55 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[18625]: pam_unix(sudo:session): session closed for user root Jul 25 07:00:55 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18625]: USER_END pid=18625 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:55 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18625]: CRED_DISP pid=18625 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:55 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:55 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:55 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:55 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:55 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=18630 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:55 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:55 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:55 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:55 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:55 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=18647 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:55 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:55 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:55 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:55 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:55 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=18663 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:55 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:55 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:55 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:55 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:55 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=18685 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:55 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:55 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:55 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:55 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:55 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=18701 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:55 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:55 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:55 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:55 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:55 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=18718 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:55 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18736]: USER_ACCT pid=18736 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:55 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[18736]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-xmiqhxxypbxexzapnebyfbcmkdlmdjsc ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905255.1772249-6266-181014057789210/AnsiballZ_setup.py' Jul 25 07:00:55 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18736]: USER_CMD pid=18736 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786D69716878787970627865787A61706E6562796662636D6B646C6D646A7363203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353235352E313737323234392D363236362D3138313031343035373738393231302F416E736962616C6C5A5F73657475702E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:00:55 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18736]: CRED_REFR pid=18736 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:55 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[18736]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:00:55 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18736]: USER_START pid=18736 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:55 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[18738]: ansible-setup Invoked with gather_subset=['all'] gather_timeout=10 filter=[] fact_path=/etc/ansible/facts.d Jul 25 07:00:56 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18736]: USER_END pid=18736 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:56 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[18736]: pam_unix(sudo:session): session closed for user root Jul 25 07:00:56 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18736]: CRED_DISP pid=18736 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:56 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:56 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:56 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:56 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:56 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=18763 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:56 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:56 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:56 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:56 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:56 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=18780 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:56 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:56 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:56 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:56 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:56 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=18796 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:56 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:56 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:56 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:56 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:56 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=18818 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:56 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:56 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:56 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:56 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:56 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=18834 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:56 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:56 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:56 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:56 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:56 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=18851 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:56 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18869]: USER_ACCT pid=18869 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:56 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[18869]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-vrnnqlxzgeddyibewgxmnzhjcpskmmdp ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905256.2376812-6276-44291153246965/AnsiballZ_dnf.py' Jul 25 07:00:56 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18869]: USER_CMD pid=18869 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76726E6E716C787A67656464796962657767786D6E7A686A6370736B6D6D6470203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353235362E323337363831322D363237362D34343239313135333234363936352F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:00:56 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18869]: CRED_REFR pid=18869 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:56 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[18869]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:00:56 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18869]: USER_START pid=18869 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:56 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[18871]: ansible-ansible.legacy.dnf Invoked with name=['util-linux-core'] state=present allow_downgrade=False allowerasing=False autoremove=False bugfix=False cacheonly=False disable_gpg_check=False disable_plugin=[] disablerepo=[] download_only=False enable_plugin=[] enablerepo=[] exclude=[] installroot=/ install_repoquery=True install_weak_deps=True security=False skip_broken=False update_cache=False update_only=False validate_certs=True sslverify=True lock_timeout=30 use_backend=auto best=None conf_file=None disable_excludes=None download_dir=None list=None nobest=None releasever=None Jul 25 07:00:57 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18869]: USER_END pid=18869 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:57 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[18869]: pam_unix(sudo:session): session closed for user root Jul 25 07:00:57 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18869]: CRED_DISP pid=18869 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:57 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:57 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:57 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:57 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:57 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=18873 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:57 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:57 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=18890 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=18906 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=18928 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=18944 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=18961 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18979]: USER_ACCT pid=18979 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[18979]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-wgrkdgsqqonxjguffvyvmviuqpvzmuey ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905258.0707912-6284-89164884268347/AnsiballZ_find_unused_disk.py' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18979]: USER_CMD pid=18979 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7767726B64677371716F6E786A677566667679766D7669757170767A6D756579203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353235382E303730373931322D363238342D38393136343838343236383334372F416E736962616C6C5A5F66696E645F756E757365645F6469736B2E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18979]: CRED_REFR pid=18979 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[18979]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18979]: USER_START pid=18979 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[18981]: ansible-fedora.linux_system_roles.find_unused_disk Invoked with min_size=5g max_return=1 max_size=0 match_sector_size=False with_interface=None Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[18979]: pam_unix(sudo:session): session closed for user root Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18979]: USER_END pid=18979 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[18979]: CRED_DISP pid=18979 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=18985 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=19002 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=19018 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=19040 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=19056 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_END pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGOUT pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=ssh res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_LOGIN pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: USER_START pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=/dev/pts/0 res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[1415]: CRYPTO_KEY_USER pid=1415 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7a:a0:44:89:09:d6:94:8e:a3:18:bc:56:70:b8:da:a1:50:29:f8:21:91:84:d6:a1:15:27:a3:95:b8:05:62:8f direction=? spid=19073 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.13.105 terminal=? res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[19091]: USER_ACCT pid=19091 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[19091]: USER_CMD pid=19091 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67657A66757A677A6C66786367657876756776757664757571706F6A69696365203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353235382E363638363135382D363239322D36303232363630323030363537302F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[19091]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-gezfuzgzlfxcgexvugvuvduuqpojiice ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905258.6686158-6292-60226602006570/AnsiballZ_command.py' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[19091]: CRED_REFR pid=19091 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com sudo[19091]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:00:58 ip-10-31-15-157.us-east-1.aws.redhat.com audit[19091]: USER_START pid=19091 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:00:59 ip-10-31-15-157.us-east-1.aws.redhat.com python3.12[19093]: ansible-ansible.legacy.command Invoked with _raw_params=set -x exec 1>&2 lsblk -p --pairs --bytes -o NAME,TYPE,SIZE,FSTYPE,LOG-SEC journalctl -ex _uses_shell=True expand_argument_vars=True stdin_add_newline=True strip_empty_ends=True argv=None chdir=None executable=None creates=None removes=None stdin=None TASK [Set unused_disks if necessary] ******************************************* Thursday 25 July 2024 07:00:59 -0400 (0:00:00.604) 0:00:15.276 ********* skipping: [managed_node1] => { "changed": false, "false_condition": "'Unable to find unused disk' not in unused_disks_return.disks", "skip_reason": "Conditional result was False" } TASK [Exit playbook when there's not enough unused disks in the system] ******** Thursday 25 July 2024 07:00:59 -0400 (0:00:00.023) 0:00:15.300 ********* fatal: [managed_node1]: FAILED! => { "changed": false } MSG: Unable to find enough unused disks. Exiting playbook. PLAY RECAP ********************************************************************* managed_node1 : ok=29 changed=0 unreachable=0 failed=1 skipped=15 rescued=0 ignored=0 Thursday 25 July 2024 07:00:59 -0400 (0:00:00.027) 0:00:15.327 ********* =============================================================================== fedora.linux_system_roles.storage : Get service facts ------------------- 2.40s fedora.linux_system_roles.storage : Make sure blivet is available ------- 2.02s Ensure test packages ---------------------------------------------------- 1.84s fedora.linux_system_roles.storage : Make sure required packages are installed --- 1.77s Gathering Facts --------------------------------------------------------- 1.33s fedora.linux_system_roles.storage : Update facts ------------------------ 0.96s fedora.linux_system_roles.storage : Get required packages --------------- 0.79s fedora.linux_system_roles.storage : Manage the pools and volumes to match the specified state --- 0.62s Find unused disks in the system ----------------------------------------- 0.61s Debug why there are no unused disks ------------------------------------- 0.60s fedora.linux_system_roles.storage : Check if system is ostree ----------- 0.53s fedora.linux_system_roles.storage : Check if /etc/fstab is present ------ 0.42s fedora.linux_system_roles.storage : Retrieve facts for the /etc/crypttab file --- 0.41s fedora.linux_system_roles.storage : Include the appropriate provider tasks --- 0.06s fedora.linux_system_roles.storage : Set storage_cryptsetup_services ----- 0.06s fedora.linux_system_roles.storage : Set platform/version specific variables --- 0.05s Get unused disks for test ----------------------------------------------- 0.04s fedora.linux_system_roles.storage : Enable copr repositories if needed --- 0.04s fedora.linux_system_roles.storage : Check if the COPR support packages should be installed --- 0.04s fedora.linux_system_roles.storage : Enable COPRs ------------------------ 0.04s