[DEPRECATION WARNING]: ANSIBLE_COLLECTIONS_PATHS option, does not fit var naming standard, use the singular form ANSIBLE_COLLECTIONS_PATH instead. This feature will be removed from ansible-core in version 2.19. Deprecation warnings can be disabled by setting deprecation_warnings=False in ansible.cfg. No config file found; using defaults running playbook inside collection fedora.linux_system_roles PLAY [Test LUKS] *************************************************************** TASK [Gathering Facts] ********************************************************* Thursday 25 July 2024 07:05:11 -0400 (0:00:00.012) 0:00:00.012 ********* [WARNING]: Platform linux on host managed_node1 is using the discovered Python interpreter at /usr/bin/python3.12, but future installation of another Python interpreter could change the meaning of that path. See https://docs.ansible.com/ansible- core/2.17/reference_appendices/interpreter_discovery.html for more information. ok: [managed_node1] TASK [Enable FIPS mode] ******************************************************** Thursday 25 July 2024 07:05:14 -0400 (0:00:02.710) 0:00:02.722 ********* skipping: [managed_node1] => { "changed": false, "false_condition": "lookup(\"env\", \"SYSTEM_ROLES_TEST_FIPS\") == \"true\"", "skip_reason": "Conditional result was False" } TASK [Reboot] ****************************************************************** Thursday 25 July 2024 07:05:14 -0400 (0:00:00.018) 0:00:02.741 ********* skipping: [managed_node1] => { "changed": false, "false_condition": "lookup(\"env\", \"SYSTEM_ROLES_TEST_FIPS\") == \"true\"", "skip_reason": "Conditional result was False" } TASK [Ensure dracut-fips] ****************************************************** Thursday 25 July 2024 07:05:14 -0400 (0:00:00.017) 0:00:02.759 ********* skipping: [managed_node1] => { "changed": false, "false_condition": "lookup(\"env\", \"SYSTEM_ROLES_TEST_FIPS\") == \"true\"", "skip_reason": "Conditional result was False" } TASK [Configure boot for FIPS] ************************************************* Thursday 25 July 2024 07:05:14 -0400 (0:00:00.017) 0:00:02.776 ********* skipping: [managed_node1] => { "changed": false, "false_condition": "lookup(\"env\", \"SYSTEM_ROLES_TEST_FIPS\") == \"true\"", "skip_reason": "Conditional result was False" } TASK [Reboot] ****************************************************************** Thursday 25 July 2024 07:05:14 -0400 (0:00:00.017) 0:00:02.793 ********* skipping: [managed_node1] => { "changed": false, "false_condition": "lookup(\"env\", \"SYSTEM_ROLES_TEST_FIPS\") == \"true\"", "skip_reason": "Conditional result was False" } TASK [Run the role] ************************************************************ Thursday 25 July 2024 07:05:14 -0400 (0:00:00.017) 0:00:02.811 ********* included: fedora.linux_system_roles.storage for managed_node1 TASK [fedora.linux_system_roles.storage : Set platform/version specific variables] *** Thursday 25 July 2024 07:05:14 -0400 (0:00:00.037) 0:00:02.848 ********* included: /var/ARTIFACTS/work-generalwemzaip6/plans/general/tree/tmp.4a0cc3dkOS/ansible_collections/fedora/linux_system_roles/roles/storage/tasks/set_vars.yml for managed_node1 TASK [fedora.linux_system_roles.storage : Ensure ansible_facts used by role] *** Thursday 25 July 2024 07:05:14 -0400 (0:00:00.022) 0:00:02.871 ********* skipping: [managed_node1] => { "changed": false, "false_condition": "__storage_required_facts | difference(ansible_facts.keys() | list) | length > 0", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.storage : Set platform/version specific variables] *** Thursday 25 July 2024 07:05:14 -0400 (0:00:00.024) 0:00:02.896 ********* skipping: [managed_node1] => (item=RedHat.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "RedHat.yml", "skip_reason": "Conditional result was False" } ok: [managed_node1] => (item=Fedora.yml) => { "ansible_facts": { "_storage_copr_packages": [ { "packages": [ "vdo", "kmod-vdo" ], "repository": "rhawalsh/dm-vdo" } ], "_storage_copr_support_packages": [ "dnf-plugins-core" ], "blivet_package_list": [ "python3-blivet", "libblockdev-crypto", "libblockdev-dm", "libblockdev-lvm", "libblockdev-mdraid", "libblockdev-swap", "stratisd", "stratis-cli" ] }, "ansible_included_var_files": [ "/var/ARTIFACTS/work-generalwemzaip6/plans/general/tree/tmp.4a0cc3dkOS/ansible_collections/fedora/linux_system_roles/roles/storage/vars/Fedora.yml" ], "ansible_loop_var": "item", "changed": false, "item": "Fedora.yml" } skipping: [managed_node1] => (item=Fedora_40.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "Fedora_40.yml", "skip_reason": "Conditional result was False" } skipping: [managed_node1] => (item=Fedora_40.yml) => { "ansible_loop_var": "item", "changed": false, "false_condition": "__vars_file is file", "item": "Fedora_40.yml", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.storage : Check if system is ostree] *********** Thursday 25 July 2024 07:05:14 -0400 (0:00:00.042) 0:00:02.938 ********* ok: [managed_node1] => { "changed": false, "stat": { "exists": false } } TASK [fedora.linux_system_roles.storage : Set flag to indicate system is ostree] *** Thursday 25 July 2024 07:05:14 -0400 (0:00:00.499) 0:00:03.438 ********* ok: [managed_node1] => { "ansible_facts": { "__storage_is_ostree": false }, "changed": false } TASK [fedora.linux_system_roles.storage : Define an empty list of pools to be used in testing] *** Thursday 25 July 2024 07:05:14 -0400 (0:00:00.025) 0:00:03.464 ********* ok: [managed_node1] => { "ansible_facts": { "_storage_pools_list": [] }, "changed": false } TASK [fedora.linux_system_roles.storage : Define an empty list of volumes to be used in testing] *** Thursday 25 July 2024 07:05:14 -0400 (0:00:00.016) 0:00:03.481 ********* ok: [managed_node1] => { "ansible_facts": { "_storage_volumes_list": [] }, "changed": false } TASK [fedora.linux_system_roles.storage : Include the appropriate provider tasks] *** Thursday 25 July 2024 07:05:14 -0400 (0:00:00.016) 0:00:03.497 ********* included: /var/ARTIFACTS/work-generalwemzaip6/plans/general/tree/tmp.4a0cc3dkOS/ansible_collections/fedora/linux_system_roles/roles/storage/tasks/main-blivet.yml for managed_node1 TASK [fedora.linux_system_roles.storage : Make sure blivet is available] ******* Thursday 25 July 2024 07:05:14 -0400 (0:00:00.050) 0:00:03.548 ********* ok: [managed_node1] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do lsrpackages: libblockdev-crypto libblockdev-dm libblockdev-lvm libblockdev-mdraid libblockdev-swap python3-blivet stratis-cli stratisd TASK [fedora.linux_system_roles.storage : Show storage_pools] ****************** Thursday 25 July 2024 07:05:16 -0400 (0:00:01.523) 0:00:05.071 ********* ok: [managed_node1] => { "storage_pools": "VARIABLE IS NOT DEFINED!: 'storage_pools' is undefined" } TASK [fedora.linux_system_roles.storage : Show storage_volumes] **************** Thursday 25 July 2024 07:05:16 -0400 (0:00:00.020) 0:00:05.091 ********* ok: [managed_node1] => { "storage_volumes": "VARIABLE IS NOT DEFINED!: 'storage_volumes' is undefined" } TASK [fedora.linux_system_roles.storage : Get required packages] *************** Thursday 25 July 2024 07:05:16 -0400 (0:00:00.019) 0:00:05.111 ********* ok: [managed_node1] => { "actions": [], "changed": false, "crypts": [], "leaves": [], "mounts": [], "packages": [], "pools": [], "volumes": [] } TASK [fedora.linux_system_roles.storage : Enable copr repositories if needed] *** Thursday 25 July 2024 07:05:17 -0400 (0:00:00.729) 0:00:05.840 ********* included: /var/ARTIFACTS/work-generalwemzaip6/plans/general/tree/tmp.4a0cc3dkOS/ansible_collections/fedora/linux_system_roles/roles/storage/tasks/enable_coprs.yml for managed_node1 TASK [fedora.linux_system_roles.storage : Check if the COPR support packages should be installed] *** Thursday 25 July 2024 07:05:17 -0400 (0:00:00.033) 0:00:05.874 ********* skipping: [managed_node1] => (item={'repository': 'rhawalsh/dm-vdo', 'packages': ['vdo', 'kmod-vdo']}) => { "ansible_loop_var": "repo", "changed": false, "false_condition": "repo.packages | intersect(copr_packages) | length > 0", "repo": { "packages": [ "vdo", "kmod-vdo" ], "repository": "rhawalsh/dm-vdo" }, "skip_reason": "Conditional result was False" } skipping: [managed_node1] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.storage : Make sure COPR support packages are present] *** Thursday 25 July 2024 07:05:17 -0400 (0:00:00.032) 0:00:05.907 ********* skipping: [managed_node1] => { "changed": false, "false_condition": "install_copr | d(false) | bool", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.storage : Enable COPRs] ************************ Thursday 25 July 2024 07:05:17 -0400 (0:00:00.021) 0:00:05.928 ********* skipping: [managed_node1] => (item={'repository': 'rhawalsh/dm-vdo', 'packages': ['vdo', 'kmod-vdo']}) => { "ansible_loop_var": "repo", "changed": false, "false_condition": "repo.packages | intersect(copr_packages) | length > 0", "repo": { "packages": [ "vdo", "kmod-vdo" ], "repository": "rhawalsh/dm-vdo" }, "skip_reason": "Conditional result was False" } skipping: [managed_node1] => { "changed": false } MSG: All items skipped TASK [fedora.linux_system_roles.storage : Make sure required packages are installed] *** Thursday 25 July 2024 07:05:17 -0400 (0:00:00.032) 0:00:05.961 ********* ok: [managed_node1] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do lsrpackages: kpartx TASK [fedora.linux_system_roles.storage : Get service facts] ******************* Thursday 25 July 2024 07:05:18 -0400 (0:00:01.382) 0:00:07.343 ********* ok: [managed_node1] => { "ansible_facts": { "services": { "NetworkManager-dispatcher.service": { "name": "NetworkManager-dispatcher.service", "source": "systemd", "state": "inactive", "status": "enabled" }, "NetworkManager-wait-online.service": { "name": "NetworkManager-wait-online.service", "source": "systemd", "state": "stopped", "status": "enabled" }, "NetworkManager.service": { "name": "NetworkManager.service", "source": "systemd", "state": "running", "status": "enabled" }, "arp-ethers.service": { "name": "arp-ethers.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "audit-rules.service": { "name": "audit-rules.service", "source": "systemd", "state": "stopped", "status": "enabled" }, "auditd.service": { "name": "auditd.service", "source": "systemd", "state": "running", "status": "enabled" }, "auth-rpcgss-module.service": { "name": "auth-rpcgss-module.service", "source": "systemd", "state": "stopped", "status": "static" }, "autovt@.service": { "name": "autovt@.service", "source": "systemd", "state": "unknown", "status": "alias" }, "blivet.service": { "name": "blivet.service", "source": "systemd", "state": "inactive", "status": "static" }, "blk-availability.service": { "name": "blk-availability.service", "source": "systemd", "state": "stopped", "status": "disabled" }, "bluetooth.service": { "name": "bluetooth.service", "source": "systemd", "state": "inactive", "status": "enabled" }, "chrony-wait.service": { "name": "chrony-wait.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "chronyd-restricted.service": { "name": "chronyd-restricted.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "chronyd.service": { "name": "chronyd.service", "source": "systemd", "state": "running", "status": "enabled" }, "cloud-config.service": { "name": "cloud-config.service", "source": "systemd", "state": "stopped", "status": "enabled" }, "cloud-final.service": { "name": "cloud-final.service", "source": "systemd", "state": "stopped", "status": "enabled" }, "cloud-init-hotplugd.service": { "name": "cloud-init-hotplugd.service", "source": "systemd", "state": "inactive", "status": "static" }, "cloud-init-local.service": { "name": "cloud-init-local.service", "source": "systemd", "state": "stopped", "status": "enabled" }, "cloud-init.service": { "name": "cloud-init.service", "source": "systemd", "state": "stopped", "status": "enabled" }, "console-getty.service": { "name": "console-getty.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "container-getty@.service": { "name": "container-getty@.service", "source": "systemd", "state": "unknown", "status": "static" }, "dbus-broker.service": { "name": "dbus-broker.service", "source": "systemd", "state": "running", "status": "enabled" }, "dbus-org.bluez.service": { "name": "dbus-org.bluez.service", "source": "systemd", "state": "inactive", "status": "alias" }, "dbus-org.freedesktop.home1.service": { "name": "dbus-org.freedesktop.home1.service", "source": "systemd", "state": "active", "status": "alias" }, "dbus-org.freedesktop.hostname1.service": { "name": "dbus-org.freedesktop.hostname1.service", "source": "systemd", "state": "inactive", "status": "alias" }, "dbus-org.freedesktop.locale1.service": { "name": "dbus-org.freedesktop.locale1.service", "source": "systemd", "state": "inactive", "status": "alias" }, "dbus-org.freedesktop.login1.service": { "name": "dbus-org.freedesktop.login1.service", "source": "systemd", "state": "active", "status": "alias" }, "dbus-org.freedesktop.nm-dispatcher.service": { "name": "dbus-org.freedesktop.nm-dispatcher.service", "source": "systemd", "state": "inactive", "status": "alias" }, "dbus-org.freedesktop.oom1.service": { "name": "dbus-org.freedesktop.oom1.service", "source": "systemd", "state": "active", "status": "alias" }, "dbus-org.freedesktop.portable1.service": { "name": "dbus-org.freedesktop.portable1.service", "source": "systemd", "state": "inactive", "status": "alias" }, "dbus-org.freedesktop.resolve1.service": { "name": "dbus-org.freedesktop.resolve1.service", "source": "systemd", "state": "active", "status": "alias" }, "dbus-org.freedesktop.timedate1.service": { "name": "dbus-org.freedesktop.timedate1.service", "source": "systemd", "state": "inactive", "status": "alias" }, "dbus.service": { "name": "dbus.service", "source": "systemd", "state": "active", "status": "alias" }, "debug-shell.service": { "name": "debug-shell.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "dhcpcd.service": { "name": "dhcpcd.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "dhcpcd@.service": { "name": "dhcpcd@.service", "source": "systemd", "state": "unknown", "status": "disabled" }, "display-manager.service": { "name": "display-manager.service", "source": "systemd", "state": "stopped", "status": "not-found" }, "dm-event.service": { "name": "dm-event.service", "source": "systemd", "state": "stopped", "status": "static" }, "dnf-makecache.service": { "name": "dnf-makecache.service", "source": "systemd", "state": "stopped", "status": "static" }, "dnf-system-upgrade-cleanup.service": { "name": "dnf-system-upgrade-cleanup.service", "source": "systemd", "state": "inactive", "status": "static" }, "dnf-system-upgrade.service": { "name": "dnf-system-upgrade.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "dracut-cmdline.service": { "name": "dracut-cmdline.service", "source": "systemd", "state": "stopped", "status": "static" }, "dracut-initqueue.service": { "name": "dracut-initqueue.service", "source": "systemd", "state": "stopped", "status": "static" }, "dracut-mount.service": { "name": "dracut-mount.service", "source": "systemd", "state": "stopped", "status": "static" }, "dracut-pre-mount.service": { "name": "dracut-pre-mount.service", "source": "systemd", "state": "stopped", "status": "static" }, "dracut-pre-pivot.service": { "name": "dracut-pre-pivot.service", "source": "systemd", "state": "stopped", "status": "static" }, "dracut-pre-trigger.service": { "name": "dracut-pre-trigger.service", "source": "systemd", "state": "stopped", "status": "static" }, "dracut-pre-udev.service": { "name": "dracut-pre-udev.service", "source": "systemd", "state": "stopped", "status": "static" }, "dracut-shutdown-onfailure.service": { "name": "dracut-shutdown-onfailure.service", "source": "systemd", "state": "stopped", "status": "static" }, "dracut-shutdown.service": { "name": "dracut-shutdown.service", "source": "systemd", "state": "stopped", "status": "static" }, "emergency.service": { "name": "emergency.service", "source": "systemd", "state": "stopped", "status": "static" }, "fcoe.service": { "name": "fcoe.service", "source": "systemd", "state": "stopped", "status": "not-found" }, "firewalld.service": { "name": "firewalld.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "fsidd.service": { "name": "fsidd.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "fstrim.service": { "name": "fstrim.service", "source": "systemd", "state": "stopped", "status": "static" }, "fwupd-offline-update.service": { "name": "fwupd-offline-update.service", "source": "systemd", "state": "inactive", "status": "static" }, "fwupd-refresh.service": { "name": "fwupd-refresh.service", "source": "systemd", "state": "inactive", "status": "static" }, "fwupd.service": { "name": "fwupd.service", "source": "systemd", "state": "inactive", "status": "static" }, "getty@.service": { "name": "getty@.service", "source": "systemd", "state": "unknown", "status": "enabled" }, "getty@tty1.service": { "name": "getty@tty1.service", "source": "systemd", "state": "running", "status": "active" }, "grub-boot-indeterminate.service": { "name": "grub-boot-indeterminate.service", "source": "systemd", "state": "inactive", "status": "static" }, "grub2-systemd-integration.service": { "name": "grub2-systemd-integration.service", "source": "systemd", "state": "inactive", "status": "static" }, "gssproxy.service": { "name": "gssproxy.service", "source": "systemd", "state": "running", "status": "disabled" }, "hv_kvp_daemon.service": { "name": "hv_kvp_daemon.service", "source": "systemd", "state": "stopped", "status": "not-found" }, "initrd-cleanup.service": { "name": "initrd-cleanup.service", "source": "systemd", "state": "stopped", "status": "static" }, "initrd-parse-etc.service": { "name": "initrd-parse-etc.service", "source": "systemd", "state": "stopped", "status": "static" }, "initrd-switch-root.service": { "name": "initrd-switch-root.service", "source": "systemd", "state": "stopped", "status": "static" }, "initrd-udevadm-cleanup-db.service": { "name": "initrd-udevadm-cleanup-db.service", "source": "systemd", "state": "stopped", "status": "static" }, "iscsi-shutdown.service": { "name": "iscsi-shutdown.service", "source": "systemd", "state": "stopped", "status": "not-found" }, "iscsi.service": { "name": "iscsi.service", "source": "systemd", "state": "stopped", "status": "not-found" }, "iscsid.service": { "name": "iscsid.service", "source": "systemd", "state": "stopped", "status": "not-found" }, "kmod-static-nodes.service": { "name": "kmod-static-nodes.service", "source": "systemd", "state": "stopped", "status": "static" }, "ldconfig.service": { "name": "ldconfig.service", "source": "systemd", "state": "stopped", "status": "static" }, "lvm2-activation-early.service": { "name": "lvm2-activation-early.service", "source": "systemd", "state": "stopped", "status": "not-found" }, "lvm2-lvmpolld.service": { "name": "lvm2-lvmpolld.service", "source": "systemd", "state": "stopped", "status": "static" }, "lvm2-monitor.service": { "name": "lvm2-monitor.service", "source": "systemd", "state": "stopped", "status": "enabled" }, "man-db-cache-update.service": { "name": "man-db-cache-update.service", "source": "systemd", "state": "inactive", "status": "static" }, "man-db-restart-cache-update.service": { "name": "man-db-restart-cache-update.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "mdadm-grow-continue@.service": { "name": "mdadm-grow-continue@.service", "source": "systemd", "state": "unknown", "status": "static" }, "mdadm-last-resort@.service": { "name": "mdadm-last-resort@.service", "source": "systemd", "state": "unknown", "status": "static" }, "mdcheck_continue.service": { "name": "mdcheck_continue.service", "source": "systemd", "state": "inactive", "status": "static" }, "mdcheck_start.service": { "name": "mdcheck_start.service", "source": "systemd", "state": "inactive", "status": "static" }, "mdmon@.service": { "name": "mdmon@.service", "source": "systemd", "state": "unknown", "status": "static" }, "mdmonitor-oneshot.service": { "name": "mdmonitor-oneshot.service", "source": "systemd", "state": "inactive", "status": "static" }, "mdmonitor.service": { "name": "mdmonitor.service", "source": "systemd", "state": "stopped", "status": "enabled" }, "modprobe@.service": { "name": "modprobe@.service", "source": "systemd", "state": "unknown", "status": "static" }, "modprobe@configfs.service": { "name": "modprobe@configfs.service", "source": "systemd", "state": "stopped", "status": "inactive" }, "modprobe@dm_mod.service": { "name": "modprobe@dm_mod.service", "source": "systemd", "state": "stopped", "status": "inactive" }, "modprobe@dm_multipath.service": { "name": "modprobe@dm_multipath.service", "source": "systemd", "state": "stopped", "status": "inactive" }, "modprobe@drm.service": { "name": "modprobe@drm.service", "source": "systemd", "state": "stopped", "status": "inactive" }, "modprobe@efi_pstore.service": { "name": "modprobe@efi_pstore.service", "source": "systemd", "state": "stopped", "status": "inactive" }, "modprobe@fuse.service": { "name": "modprobe@fuse.service", "source": "systemd", "state": "stopped", "status": "inactive" }, "modprobe@loop.service": { "name": "modprobe@loop.service", "source": "systemd", "state": "stopped", "status": "inactive" }, "multipathd.service": { "name": "multipathd.service", "source": "systemd", "state": "stopped", "status": "enabled" }, "network.service": { "name": "network.service", "source": "systemd", "state": "stopped", "status": "not-found" }, "nfs-blkmap.service": { "name": "nfs-blkmap.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "nfs-idmapd.service": { "name": "nfs-idmapd.service", "source": "systemd", "state": "stopped", "status": "static" }, "nfs-mountd.service": { "name": "nfs-mountd.service", "source": "systemd", "state": "stopped", "status": "static" }, "nfs-server.service": { "name": "nfs-server.service", "source": "systemd", "state": "stopped", "status": "disabled" }, "nfs-utils.service": { "name": "nfs-utils.service", "source": "systemd", "state": "stopped", "status": "static" }, "nfsdcld.service": { "name": "nfsdcld.service", "source": "systemd", "state": "stopped", "status": "static" }, "nftables.service": { "name": "nftables.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "nis-domainname.service": { "name": "nis-domainname.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "nm-priv-helper.service": { "name": "nm-priv-helper.service", "source": "systemd", "state": "inactive", "status": "static" }, "ntpd.service": { "name": "ntpd.service", "source": "systemd", "state": "stopped", "status": "not-found" }, "ntpdate.service": { "name": "ntpdate.service", "source": "systemd", "state": "stopped", "status": "not-found" }, "pam_namespace.service": { "name": "pam_namespace.service", "source": "systemd", "state": "inactive", "status": "static" }, "passim.service": { "name": "passim.service", "source": "systemd", "state": "inactive", "status": "static" }, "pcscd.service": { "name": "pcscd.service", "source": "systemd", "state": "stopped", "status": "indirect" }, "plymouth-halt.service": { "name": "plymouth-halt.service", "source": "systemd", "state": "inactive", "status": "static" }, "plymouth-kexec.service": { "name": "plymouth-kexec.service", "source": "systemd", "state": "inactive", "status": "static" }, "plymouth-poweroff.service": { "name": "plymouth-poweroff.service", "source": "systemd", "state": "inactive", "status": "static" }, "plymouth-quit-wait.service": { "name": "plymouth-quit-wait.service", "source": "systemd", "state": "stopped", "status": "static" }, "plymouth-quit.service": { "name": "plymouth-quit.service", "source": "systemd", "state": "stopped", "status": "static" }, "plymouth-read-write.service": { "name": "plymouth-read-write.service", "source": "systemd", "state": "stopped", "status": "static" }, "plymouth-reboot.service": { "name": "plymouth-reboot.service", "source": "systemd", "state": "inactive", "status": "static" }, "plymouth-start.service": { "name": "plymouth-start.service", "source": "systemd", "state": "stopped", "status": "static" }, "plymouth-switch-root-initramfs.service": { "name": "plymouth-switch-root-initramfs.service", "source": "systemd", "state": "inactive", "status": "static" }, "plymouth-switch-root.service": { "name": "plymouth-switch-root.service", "source": "systemd", "state": "stopped", "status": "static" }, "polkit.service": { "name": "polkit.service", "source": "systemd", "state": "inactive", "status": "static" }, "quotaon.service": { "name": "quotaon.service", "source": "systemd", "state": "inactive", "status": "static" }, "raid-check.service": { "name": "raid-check.service", "source": "systemd", "state": "stopped", "status": "static" }, "rbdmap.service": { "name": "rbdmap.service", "source": "systemd", "state": "stopped", "status": "not-found" }, "rc-local.service": { "name": "rc-local.service", "source": "systemd", "state": "stopped", "status": "static" }, "rescue.service": { "name": "rescue.service", "source": "systemd", "state": "stopped", "status": "static" }, "restraintd.service": { "name": "restraintd.service", "source": "systemd", "state": "running", "status": "enabled" }, "rngd.service": { "name": "rngd.service", "source": "systemd", "state": "running", "status": "enabled" }, "rpc-gssd.service": { "name": "rpc-gssd.service", "source": "systemd", "state": "stopped", "status": "static" }, "rpc-statd-notify.service": { "name": "rpc-statd-notify.service", "source": "systemd", "state": "stopped", "status": "static" }, "rpc-statd.service": { "name": "rpc-statd.service", "source": "systemd", "state": "stopped", "status": "static" }, "rpc-svcgssd.service": { "name": "rpc-svcgssd.service", "source": "systemd", "state": "stopped", "status": "not-found" }, "rpcbind.service": { "name": "rpcbind.service", "source": "systemd", "state": "stopped", "status": "disabled" }, "rpmdb-migrate.service": { "name": "rpmdb-migrate.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "rpmdb-rebuild.service": { "name": "rpmdb-rebuild.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "selinux-autorelabel-mark.service": { "name": "selinux-autorelabel-mark.service", "source": "systemd", "state": "stopped", "status": "enabled" }, "selinux-autorelabel.service": { "name": "selinux-autorelabel.service", "source": "systemd", "state": "inactive", "status": "static" }, "selinux-check-proper-disable.service": { "name": "selinux-check-proper-disable.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "serial-getty@.service": { "name": "serial-getty@.service", "source": "systemd", "state": "unknown", "status": "disabled" }, "sntp.service": { "name": "sntp.service", "source": "systemd", "state": "stopped", "status": "not-found" }, "ssh-host-keys-migration.service": { "name": "ssh-host-keys-migration.service", "source": "systemd", "state": "stopped", "status": "disabled" }, "sshd-keygen.service": { "name": "sshd-keygen.service", "source": "systemd", "state": "stopped", "status": "not-found" }, "sshd-keygen@.service": { "name": "sshd-keygen@.service", "source": "systemd", "state": "unknown", "status": "disabled" }, "sshd-keygen@ecdsa.service": { "name": "sshd-keygen@ecdsa.service", "source": "systemd", "state": "stopped", "status": "inactive" }, "sshd-keygen@ed25519.service": { "name": "sshd-keygen@ed25519.service", "source": "systemd", "state": "stopped", "status": "inactive" }, "sshd-keygen@rsa.service": { "name": "sshd-keygen@rsa.service", "source": "systemd", "state": "stopped", "status": "inactive" }, "sshd.service": { "name": "sshd.service", "source": "systemd", "state": "running", "status": "enabled" }, "sshd@.service": { "name": "sshd@.service", "source": "systemd", "state": "unknown", "status": "static" }, "sssd-autofs.service": { "name": "sssd-autofs.service", "source": "systemd", "state": "inactive", "status": "indirect" }, "sssd-kcm.service": { "name": "sssd-kcm.service", "source": "systemd", "state": "stopped", "status": "indirect" }, "sssd-nss.service": { "name": "sssd-nss.service", "source": "systemd", "state": "inactive", "status": "indirect" }, "sssd-pac.service": { "name": "sssd-pac.service", "source": "systemd", "state": "inactive", "status": "indirect" }, "sssd-pam.service": { "name": "sssd-pam.service", "source": "systemd", "state": "inactive", "status": "indirect" }, "sssd-ssh.service": { "name": "sssd-ssh.service", "source": "systemd", "state": "inactive", "status": "indirect" }, "sssd-sudo.service": { "name": "sssd-sudo.service", "source": "systemd", "state": "inactive", "status": "indirect" }, "sssd.service": { "name": "sssd.service", "source": "systemd", "state": "stopped", "status": "enabled" }, "stratis-fstab-setup@.service": { "name": "stratis-fstab-setup@.service", "source": "systemd", "state": "unknown", "status": "static" }, "stratisd-min-postinitrd.service": { "name": "stratisd-min-postinitrd.service", "source": "systemd", "state": "inactive", "status": "static" }, "stratisd.service": { "name": "stratisd.service", "source": "systemd", "state": "stopped", "status": "enabled" }, "syslog.service": { "name": "syslog.service", "source": "systemd", "state": "stopped", "status": "not-found" }, "system-update-cleanup.service": { "name": "system-update-cleanup.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-ask-password-console.service": { "name": "systemd-ask-password-console.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-ask-password-plymouth.service": { "name": "systemd-ask-password-plymouth.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-ask-password-wall.service": { "name": "systemd-ask-password-wall.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-backlight@.service": { "name": "systemd-backlight@.service", "source": "systemd", "state": "unknown", "status": "static" }, "systemd-battery-check.service": { "name": "systemd-battery-check.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-binfmt.service": { "name": "systemd-binfmt.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-bless-boot.service": { "name": "systemd-bless-boot.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-boot-check-no-failures.service": { "name": "systemd-boot-check-no-failures.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "systemd-boot-random-seed.service": { "name": "systemd-boot-random-seed.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-boot-update.service": { "name": "systemd-boot-update.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "systemd-bsod.service": { "name": "systemd-bsod.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-confext.service": { "name": "systemd-confext.service", "source": "systemd", "state": "stopped", "status": "enabled" }, "systemd-coredump@.service": { "name": "systemd-coredump@.service", "source": "systemd", "state": "unknown", "status": "static" }, "systemd-exit.service": { "name": "systemd-exit.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-firstboot.service": { "name": "systemd-firstboot.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-fsck-root.service": { "name": "systemd-fsck-root.service", "source": "systemd", "state": "stopped", "status": "enabled-runtime" }, "systemd-fsck@.service": { "name": "systemd-fsck@.service", "source": "systemd", "state": "unknown", "status": "static" }, "systemd-growfs-root.service": { "name": "systemd-growfs-root.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-growfs@.service": { "name": "systemd-growfs@.service", "source": "systemd", "state": "unknown", "status": "static" }, "systemd-halt.service": { "name": "systemd-halt.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-hibernate-resume.service": { "name": "systemd-hibernate-resume.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-hibernate.service": { "name": "systemd-hibernate.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-homed-activate.service": { "name": "systemd-homed-activate.service", "source": "systemd", "state": "stopped", "status": "enabled" }, "systemd-homed.service": { "name": "systemd-homed.service", "source": "systemd", "state": "running", "status": "enabled" }, "systemd-hostnamed.service": { "name": "systemd-hostnamed.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-hwdb-update.service": { "name": "systemd-hwdb-update.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-hybrid-sleep.service": { "name": "systemd-hybrid-sleep.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-initctl.service": { "name": "systemd-initctl.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-journal-catalog-update.service": { "name": "systemd-journal-catalog-update.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-journal-flush.service": { "name": "systemd-journal-flush.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-journald.service": { "name": "systemd-journald.service", "source": "systemd", "state": "running", "status": "static" }, "systemd-journald@.service": { "name": "systemd-journald@.service", "source": "systemd", "state": "unknown", "status": "static" }, "systemd-kexec.service": { "name": "systemd-kexec.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-localed.service": { "name": "systemd-localed.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-logind.service": { "name": "systemd-logind.service", "source": "systemd", "state": "running", "status": "static" }, "systemd-machine-id-commit.service": { "name": "systemd-machine-id-commit.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-modules-load.service": { "name": "systemd-modules-load.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-network-generator.service": { "name": "systemd-network-generator.service", "source": "systemd", "state": "stopped", "status": "enabled" }, "systemd-networkd-wait-online.service": { "name": "systemd-networkd-wait-online.service", "source": "systemd", "state": "stopped", "status": "disabled" }, "systemd-networkd-wait-online@.service": { "name": "systemd-networkd-wait-online@.service", "source": "systemd", "state": "unknown", "status": "disabled" }, "systemd-networkd.service": { "name": "systemd-networkd.service", "source": "systemd", "state": "stopped", "status": "disabled" }, "systemd-oomd.service": { "name": "systemd-oomd.service", "source": "systemd", "state": "running", "status": "enabled" }, "systemd-pcrextend@.service": { "name": "systemd-pcrextend@.service", "source": "systemd", "state": "unknown", "status": "static" }, "systemd-pcrfs-root.service": { "name": "systemd-pcrfs-root.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-pcrfs@.service": { "name": "systemd-pcrfs@.service", "source": "systemd", "state": "unknown", "status": "static" }, "systemd-pcrlock-file-system.service": { "name": "systemd-pcrlock-file-system.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "systemd-pcrlock-firmware-code.service": { "name": "systemd-pcrlock-firmware-code.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "systemd-pcrlock-firmware-config.service": { "name": "systemd-pcrlock-firmware-config.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "systemd-pcrlock-machine-id.service": { "name": "systemd-pcrlock-machine-id.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "systemd-pcrlock-make-policy.service": { "name": "systemd-pcrlock-make-policy.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "systemd-pcrlock-secureboot-authority.service": { "name": "systemd-pcrlock-secureboot-authority.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "systemd-pcrlock-secureboot-policy.service": { "name": "systemd-pcrlock-secureboot-policy.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "systemd-pcrmachine.service": { "name": "systemd-pcrmachine.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-pcrphase-initrd.service": { "name": "systemd-pcrphase-initrd.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-pcrphase-sysinit.service": { "name": "systemd-pcrphase-sysinit.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-pcrphase.service": { "name": "systemd-pcrphase.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-portabled.service": { "name": "systemd-portabled.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-poweroff.service": { "name": "systemd-poweroff.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-pstore.service": { "name": "systemd-pstore.service", "source": "systemd", "state": "stopped", "status": "enabled" }, "systemd-quotacheck.service": { "name": "systemd-quotacheck.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-random-seed.service": { "name": "systemd-random-seed.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-reboot.service": { "name": "systemd-reboot.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-remount-fs.service": { "name": "systemd-remount-fs.service", "source": "systemd", "state": "stopped", "status": "enabled-runtime" }, "systemd-repart.service": { "name": "systemd-repart.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-resolved.service": { "name": "systemd-resolved.service", "source": "systemd", "state": "running", "status": "enabled" }, "systemd-rfkill.service": { "name": "systemd-rfkill.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-soft-reboot.service": { "name": "systemd-soft-reboot.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-storagetm.service": { "name": "systemd-storagetm.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-suspend-then-hibernate.service": { "name": "systemd-suspend-then-hibernate.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-suspend.service": { "name": "systemd-suspend.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-sysctl.service": { "name": "systemd-sysctl.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-sysext.service": { "name": "systemd-sysext.service", "source": "systemd", "state": "stopped", "status": "enabled" }, "systemd-sysext@.service": { "name": "systemd-sysext@.service", "source": "systemd", "state": "unknown", "status": "static" }, "systemd-sysupdate-reboot.service": { "name": "systemd-sysupdate-reboot.service", "source": "systemd", "state": "inactive", "status": "indirect" }, "systemd-sysupdate.service": { "name": "systemd-sysupdate.service", "source": "systemd", "state": "inactive", "status": "indirect" }, "systemd-sysusers.service": { "name": "systemd-sysusers.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-time-wait-sync.service": { "name": "systemd-time-wait-sync.service", "source": "systemd", "state": "inactive", "status": "disabled" }, "systemd-timedated.service": { "name": "systemd-timedated.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-timesyncd.service": { "name": "systemd-timesyncd.service", "source": "systemd", "state": "stopped", "status": "disabled" }, "systemd-tmpfiles-clean.service": { "name": "systemd-tmpfiles-clean.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-tmpfiles-setup-dev-early.service": { "name": "systemd-tmpfiles-setup-dev-early.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-tmpfiles-setup-dev.service": { "name": "systemd-tmpfiles-setup-dev.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-tmpfiles-setup.service": { "name": "systemd-tmpfiles-setup.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-tpm2-setup-early.service": { "name": "systemd-tpm2-setup-early.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-tpm2-setup.service": { "name": "systemd-tpm2-setup.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-udev-settle.service": { "name": "systemd-udev-settle.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-udev-trigger.service": { "name": "systemd-udev-trigger.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-udevd.service": { "name": "systemd-udevd.service", "source": "systemd", "state": "running", "status": "static" }, "systemd-update-done.service": { "name": "systemd-update-done.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-update-utmp-runlevel.service": { "name": "systemd-update-utmp-runlevel.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-update-utmp.service": { "name": "systemd-update-utmp.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-user-sessions.service": { "name": "systemd-user-sessions.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-userdbd.service": { "name": "systemd-userdbd.service", "source": "systemd", "state": "running", "status": "indirect" }, "systemd-vconsole-setup.service": { "name": "systemd-vconsole-setup.service", "source": "systemd", "state": "stopped", "status": "static" }, "systemd-volatile-root.service": { "name": "systemd-volatile-root.service", "source": "systemd", "state": "inactive", "status": "static" }, "systemd-zram-setup@.service": { "name": "systemd-zram-setup@.service", "source": "systemd", "state": "unknown", "status": "static" }, "systemd-zram-setup@zram0.service": { "name": "systemd-zram-setup@zram0.service", "source": "systemd", "state": "stopped", "status": "active" }, "udisks2.service": { "name": "udisks2.service", "source": "systemd", "state": "stopped", "status": "enabled" }, "unbound-anchor.service": { "name": "unbound-anchor.service", "source": "systemd", "state": "stopped", "status": "static" }, "user-runtime-dir@.service": { "name": "user-runtime-dir@.service", "source": "systemd", "state": "unknown", "status": "static" }, "user-runtime-dir@0.service": { "name": "user-runtime-dir@0.service", "source": "systemd", "state": "stopped", "status": "active" }, "user@.service": { "name": "user@.service", "source": "systemd", "state": "unknown", "status": "static" }, "user@0.service": { "name": "user@0.service", "source": "systemd", "state": "running", "status": "active" } } }, "changed": false } TASK [fedora.linux_system_roles.storage : Set storage_cryptsetup_services] ***** Thursday 25 July 2024 07:05:21 -0400 (0:00:02.721) 0:00:10.065 ********* ok: [managed_node1] => { "ansible_facts": { "storage_cryptsetup_services": [] }, "changed": false } TASK [fedora.linux_system_roles.storage : Mask the systemd cryptsetup services] *** Thursday 25 July 2024 07:05:21 -0400 (0:00:00.044) 0:00:10.109 ********* skipping: [managed_node1] => { "changed": false, "skipped_reason": "No items in the list" } TASK [fedora.linux_system_roles.storage : Manage the pools and volumes to match the specified state] *** Thursday 25 July 2024 07:05:21 -0400 (0:00:00.016) 0:00:10.126 ********* ok: [managed_node1] => { "actions": [], "changed": false, "crypts": [], "leaves": [], "mounts": [], "packages": [], "pools": [], "volumes": [] } TASK [fedora.linux_system_roles.storage : Workaround for udev issue on some platforms] *** Thursday 25 July 2024 07:05:22 -0400 (0:00:00.601) 0:00:10.727 ********* skipping: [managed_node1] => { "changed": false, "false_condition": "storage_udevadm_trigger | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.storage : Check if /etc/fstab is present] ****** Thursday 25 July 2024 07:05:22 -0400 (0:00:00.025) 0:00:10.753 ********* ok: [managed_node1] => { "changed": false, "stat": { "atime": 1721904821.4652069, "attr_flags": "e", "attributes": [ "extents" ], "block_size": 4096, "blocks": 8, "charset": "us-ascii", "checksum": "5e247d13efd6d196ae011933e05bcaefd0368dae", "ctime": 1721812897.2051704, "dev": 51714, "device_type": 0, "executable": false, "exists": true, "gid": 0, "gr_name": "root", "inode": 131080, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mimetype": "text/plain", "mode": "0644", "mtime": 1721812897.2051704, "nlink": 1, "path": "/etc/fstab", "pw_name": "root", "readable": true, "rgrp": true, "roth": true, "rusr": true, "size": 1344, "uid": 0, "version": "890647176", "wgrp": false, "woth": false, "writeable": true, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } } TASK [fedora.linux_system_roles.storage : Add fingerprint to /etc/fstab if present] *** Thursday 25 July 2024 07:05:22 -0400 (0:00:00.416) 0:00:11.170 ********* skipping: [managed_node1] => { "changed": false, "false_condition": "blivet_output is changed", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.storage : Unmask the systemd cryptsetup services] *** Thursday 25 July 2024 07:05:22 -0400 (0:00:00.024) 0:00:11.195 ********* skipping: [managed_node1] => { "changed": false, "skipped_reason": "No items in the list" } TASK [fedora.linux_system_roles.storage : Show blivet_output] ****************** Thursday 25 July 2024 07:05:22 -0400 (0:00:00.017) 0:00:11.213 ********* ok: [managed_node1] => { "blivet_output": { "actions": [], "changed": false, "crypts": [], "failed": false, "leaves": [], "mounts": [], "packages": [], "pools": [], "volumes": [] } } TASK [fedora.linux_system_roles.storage : Set the list of pools for test verification] *** Thursday 25 July 2024 07:05:22 -0400 (0:00:00.024) 0:00:11.237 ********* ok: [managed_node1] => { "ansible_facts": { "_storage_pools_list": [] }, "changed": false } TASK [fedora.linux_system_roles.storage : Set the list of volumes for test verification] *** Thursday 25 July 2024 07:05:22 -0400 (0:00:00.023) 0:00:11.260 ********* ok: [managed_node1] => { "ansible_facts": { "_storage_volumes_list": [] }, "changed": false } TASK [fedora.linux_system_roles.storage : Remove obsolete mounts] ************** Thursday 25 July 2024 07:05:22 -0400 (0:00:00.023) 0:00:11.284 ********* skipping: [managed_node1] => { "changed": false, "skipped_reason": "No items in the list" } TASK [fedora.linux_system_roles.storage : Tell systemd to refresh its view of /etc/fstab] *** Thursday 25 July 2024 07:05:22 -0400 (0:00:00.031) 0:00:11.315 ********* skipping: [managed_node1] => { "changed": false, "false_condition": "blivet_output['mounts']", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.storage : Set up new/current mounts] *********** Thursday 25 July 2024 07:05:22 -0400 (0:00:00.020) 0:00:11.335 ********* skipping: [managed_node1] => { "changed": false, "skipped_reason": "No items in the list" } TASK [fedora.linux_system_roles.storage : Manage mount ownership/permissions] *** Thursday 25 July 2024 07:05:22 -0400 (0:00:00.027) 0:00:11.363 ********* skipping: [managed_node1] => { "changed": false, "skipped_reason": "No items in the list" } TASK [fedora.linux_system_roles.storage : Tell systemd to refresh its view of /etc/fstab] *** Thursday 25 July 2024 07:05:22 -0400 (0:00:00.027) 0:00:11.390 ********* skipping: [managed_node1] => { "changed": false, "false_condition": "blivet_output['mounts']", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.storage : Retrieve facts for the /etc/crypttab file] *** Thursday 25 July 2024 07:05:22 -0400 (0:00:00.019) 0:00:11.409 ********* ok: [managed_node1] => { "changed": false, "stat": { "atime": 1721904999.0575888, "attr_flags": "e", "attributes": [ "extents" ], "block_size": 4096, "blocks": 0, "charset": "binary", "checksum": "da39a3ee5e6b4b0d3255bfef95601890afd80709", "ctime": 1721812097.365, "dev": 51714, "device_type": 0, "executable": false, "exists": true, "gid": 0, "gr_name": "root", "inode": 131081, "isblk": false, "ischr": false, "isdir": false, "isfifo": false, "isgid": false, "islnk": false, "isreg": true, "issock": false, "isuid": false, "mimetype": "inode/x-empty", "mode": "0600", "mtime": 1721811608.85, "nlink": 1, "path": "/etc/crypttab", "pw_name": "root", "readable": true, "rgrp": false, "roth": false, "rusr": true, "size": 0, "uid": 0, "version": "1175726114", "wgrp": false, "woth": false, "writeable": true, "wusr": true, "xgrp": false, "xoth": false, "xusr": false } } TASK [fedora.linux_system_roles.storage : Manage /etc/crypttab to account for changes we just made] *** Thursday 25 July 2024 07:05:23 -0400 (0:00:00.408) 0:00:11.818 ********* skipping: [managed_node1] => { "changed": false, "skipped_reason": "No items in the list" } TASK [fedora.linux_system_roles.storage : Update facts] ************************ Thursday 25 July 2024 07:05:23 -0400 (0:00:00.019) 0:00:11.837 ********* ok: [managed_node1] TASK [Get unused disks] ******************************************************** Thursday 25 July 2024 07:05:25 -0400 (0:00:02.392) 0:00:14.229 ********* included: /var/ARTIFACTS/work-generalwemzaip6/plans/general/tree/tmp.4a0cc3dkOS/ansible_collections/fedora/linux_system_roles/tests/storage/get_unused_disk.yml for managed_node1 TASK [Ensure test packages] **************************************************** Thursday 25 July 2024 07:05:25 -0400 (0:00:00.037) 0:00:14.267 ********* ok: [managed_node1] => { "changed": false, "rc": 0, "results": [] } MSG: Nothing to do lsrpackages: util-linux-core TASK [Find unused disks in the system] ***************************************** Thursday 25 July 2024 07:05:27 -0400 (0:00:01.396) 0:00:15.664 ********* ok: [managed_node1] => { "changed": false, "disks": "Unable to find unused disk", "info": [ "Line: NAME=\"/dev/xvda\" TYPE=\"disk\" SIZE=\"268435456000\" FSTYPE=\"\" LOG-SEC=\"512\"", "Line: NAME=\"/dev/xvda1\" TYPE=\"part\" SIZE=\"1048576\" FSTYPE=\"\" LOG-SEC=\"512\"", "Line type [part] is not disk: NAME=\"/dev/xvda1\" TYPE=\"part\" SIZE=\"1048576\" FSTYPE=\"\" LOG-SEC=\"512\"", "Line: NAME=\"/dev/xvda2\" TYPE=\"part\" SIZE=\"268433341952\" FSTYPE=\"ext4\" LOG-SEC=\"512\"", "Line type [part] is not disk: NAME=\"/dev/xvda2\" TYPE=\"part\" SIZE=\"268433341952\" FSTYPE=\"ext4\" LOG-SEC=\"512\"", "Line: NAME=\"/dev/zram0\" TYPE=\"disk\" SIZE=\"3897556992\" FSTYPE=\"\" LOG-SEC=\"4096\"", "filename [xvda2] is a partition", "filename [xvda1] is a partition", "Disk [/dev/xvda] attrs [{'type': 'disk', 'size': '268435456000', 'fstype': '', 'ssize': '512'}] has partitions", "Disk [/dev/zram0] attrs [{'type': 'disk', 'size': '3897556992', 'fstype': '', 'ssize': '4096'}] size is less than requested" ] } TASK [Debug why there are no unused disks] ************************************* Thursday 25 July 2024 07:05:28 -0400 (0:00:01.522) 0:00:17.187 ********* ok: [managed_node1] => { "changed": false, "cmd": "set -x\nexec 1>&2\nlsblk -p --pairs --bytes -o NAME,TYPE,SIZE,FSTYPE,LOG-SEC\njournalctl -ex\n", "delta": "0:00:00.038639", "end": "2024-07-25 07:05:29.046373", "rc": 0, "start": "2024-07-25 07:05:29.007734" } STDERR: + exec + lsblk -p --pairs --bytes -o NAME,TYPE,SIZE,FSTYPE,LOG-SEC NAME="/dev/xvda" TYPE="disk" SIZE="268435456000" FSTYPE="" LOG-SEC="512" NAME="/dev/xvda1" TYPE="part" SIZE="1048576" FSTYPE="" LOG-SEC="512" NAME="/dev/xvda2" TYPE="part" SIZE="268433341952" FSTYPE="ext4" LOG-SEC="512" NAME="/dev/zram0" TYPE="disk" SIZE="3897556992" FSTYPE="" LOG-SEC="4096" + journalctl -ex Jul 25 07:04:54 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:54 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:54 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=45190 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:04:54 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:54 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:54 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:54 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:54 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=45206 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:04:54 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:54 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:54 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:54 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:54 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=45228 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:04:54 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:54 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:54 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:54 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:54 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=45244 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:04:54 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:54 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:54 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:04:54 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:04:54 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=45261 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:04:54 ip-10-31-45-123.us-east-1.aws.redhat.com audit[45279]: USER_ACCT pid=45279 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:04:54 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[45279]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-iidnwobsmsuqhmxibrxpupkpvysevryi ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905494.5201907-9536-232087405227451/AnsiballZ_stat.py' Jul 25 07:04:54 ip-10-31-45-123.us-east-1.aws.redhat.com audit[45279]: USER_CMD pid=45279 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6969646E776F62736D737571686D78696272787075706B707679736576727969203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353439342E353230313930372D393533362D3233323038373430353232373435312F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:04:54 ip-10-31-45-123.us-east-1.aws.redhat.com audit[45279]: CRED_REFR pid=45279 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:04:54 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[45279]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:04:54 ip-10-31-45-123.us-east-1.aws.redhat.com audit[45279]: USER_START pid=45279 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:04:54 ip-10-31-45-123.us-east-1.aws.redhat.com python3.12[45282]: ansible-stat Invoked with path=/run/ostree-booted follow=False get_checksum=True get_mime=True get_attributes=True checksum_algorithm=sha1 Jul 25 07:04:54 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[45279]: pam_unix(sudo:session): session closed for user root Jul 25 07:04:54 ip-10-31-45-123.us-east-1.aws.redhat.com audit[45279]: USER_END pid=45279 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:04:54 ip-10-31-45-123.us-east-1.aws.redhat.com audit[45279]: CRED_DISP pid=45279 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:04:54 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:04:54 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:04:54 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:54 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:54 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=45283 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:04:54 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:54 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:55 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:55 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:55 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=45300 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:04:55 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:55 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:55 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:55 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:55 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=45316 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:04:55 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:55 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:55 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:55 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:55 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=45338 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:04:55 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:55 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:55 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:55 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:55 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=45354 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:04:55 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:55 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:55 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:04:55 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:04:55 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=45371 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:04:55 ip-10-31-45-123.us-east-1.aws.redhat.com audit[45389]: USER_ACCT pid=45389 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:04:55 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[45389]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-fpltmreszfvqlmqgxhcfuphsaiouvfog ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905495.1335373-9548-33218669491129/AnsiballZ_dnf.py' Jul 25 07:04:55 ip-10-31-45-123.us-east-1.aws.redhat.com audit[45389]: USER_CMD pid=45389 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66706C746D7265737A6676716C6D7167786863667570687361696F7576666F67203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353439352E313333353337332D393534382D33333231383636393439313132392F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:04:55 ip-10-31-45-123.us-east-1.aws.redhat.com audit[45389]: CRED_REFR pid=45389 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:04:55 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[45389]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:04:55 ip-10-31-45-123.us-east-1.aws.redhat.com audit[45389]: USER_START pid=45389 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:04:55 ip-10-31-45-123.us-east-1.aws.redhat.com python3.12[45392]: ansible-ansible.legacy.dnf Invoked with name=['python3-blivet', 'libblockdev-crypto', 'libblockdev-dm', 'libblockdev-lvm', 'libblockdev-mdraid', 'libblockdev-swap', 'stratisd', 'stratis-cli'] state=present allow_downgrade=False allowerasing=False autoremove=False bugfix=False cacheonly=False disable_gpg_check=False disable_plugin=[] disablerepo=[] download_only=False enable_plugin=[] enablerepo=[] exclude=[] installroot=/ install_repoquery=True install_weak_deps=True security=False skip_broken=False update_cache=False update_only=False validate_certs=True sslverify=True lock_timeout=30 use_backend=auto best=None conf_file=None disable_excludes=None download_dir=None list=None nobest=None releasever=None Jul 25 07:04:56 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[45389]: pam_unix(sudo:session): session closed for user root Jul 25 07:04:56 ip-10-31-45-123.us-east-1.aws.redhat.com audit[45389]: USER_END pid=45389 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:04:56 ip-10-31-45-123.us-east-1.aws.redhat.com audit[45389]: CRED_DISP pid=45389 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:04:56 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:04:56 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:04:56 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:56 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:56 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=45394 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:04:56 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:56 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:56 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:56 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:56 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=45411 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:04:56 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:56 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:56 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:56 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:56 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=45427 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:04:56 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:56 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:56 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:56 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:56 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=45449 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:04:56 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:56 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:56 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:56 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:56 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=45465 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:04:56 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:56 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:56 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:04:56 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:04:56 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=45482 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:04:56 ip-10-31-45-123.us-east-1.aws.redhat.com audit[45500]: USER_ACCT pid=45500 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:04:56 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[45500]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-jfhhvckwczvvewtgpexrgzebrsuhvwtz ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905496.68779-9558-271337767325654/AnsiballZ_blivet.py' Jul 25 07:04:56 ip-10-31-45-123.us-east-1.aws.redhat.com audit[45500]: USER_CMD pid=45500 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A66686876636B77637A76766577746770657872677A6562727375687677747A203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353439362E36383737392D393535382D3237313333373736373332353635342F416E736962616C6C5A5F626C697665742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:04:56 ip-10-31-45-123.us-east-1.aws.redhat.com audit[45500]: CRED_REFR pid=45500 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:04:56 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[45500]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:04:56 ip-10-31-45-123.us-east-1.aws.redhat.com audit[45500]: USER_START pid=45500 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:04:57 ip-10-31-45-123.us-east-1.aws.redhat.com python3.12[45503]: ansible-fedora.linux_system_roles.blivet Invoked with pools=[] volumes=[] use_partitions=None disklabel_type=None pool_defaults={'state': 'present', 'type': 'lvm', 'disks': [], 'volumes': [], 'grow_to_fill': False, 'encryption': False, 'encryption_password': None, 'encryption_key': None, 'encryption_cipher': None, 'encryption_key_size': None, 'encryption_luks_version': None, 'raid_level': None, 'raid_device_count': None, 'raid_spare_count': None, 'raid_chunk_size': None, 'raid_metadata_version': None, 'shared': False} volume_defaults={'state': 'present', 'type': 'lvm', 'size': 0, 'disks': [], 'fs_type': 'xfs', 'fs_label': '', 'fs_create_options': '', 'fs_overwrite_existing': True, 'mount_point': '', 'mount_options': 'defaults', 'mount_check': 0, 'mount_passno': 0, 'mount_device_identifier': 'uuid', 'raid_level': None, 'raid_device_count': None, 'raid_spare_count': None, 'raid_chunk_size': None, 'raid_stripe_size': None, 'raid_metadata_version': None, 'encryption': False, 'encryption_password': None, 'encryption_key': None, 'encryption_cipher': None, 'encryption_key_size': None, 'encryption_luks_version': None, 'compression': None, 'deduplication': None, 'vdo_pool_size': None, 'thin': None, 'thin_pool_name': None, 'thin_pool_size': None, 'cached': False, 'cache_size': 0, 'cache_mode': None, 'cache_devices': []} packages_only=True safe_mode=True diskvolume_mkfs_option_map={} Jul 25 07:04:57 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[45500]: pam_unix(sudo:session): session closed for user root Jul 25 07:04:57 ip-10-31-45-123.us-east-1.aws.redhat.com audit[45500]: USER_END pid=45500 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:04:57 ip-10-31-45-123.us-east-1.aws.redhat.com audit[45500]: CRED_DISP pid=45500 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:04:57 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:04:57 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:04:57 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:57 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:57 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=45506 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:04:57 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:57 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:57 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:57 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:57 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=45523 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:04:57 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:57 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:57 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:57 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:57 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=45539 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:04:57 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:57 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:57 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:57 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:57 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=45561 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:04:57 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:57 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:57 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:57 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:57 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=45577 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:04:57 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:57 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:57 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:04:57 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:04:57 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=45594 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:04:57 ip-10-31-45-123.us-east-1.aws.redhat.com audit[45612]: USER_ACCT pid=45612 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:04:57 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[45612]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-tufjefeplchlkmupgxxqklgfndgohbwg ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905497.5240967-9570-179607885495169/AnsiballZ_dnf.py' Jul 25 07:04:57 ip-10-31-45-123.us-east-1.aws.redhat.com audit[45612]: USER_CMD pid=45612 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7475666A656665706C63686C6B6D7570677878716B6C67666E64676F68627767203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353439372E353234303936372D393537302D3137393630373838353439353136392F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:04:57 ip-10-31-45-123.us-east-1.aws.redhat.com audit[45612]: CRED_REFR pid=45612 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:04:57 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[45612]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:04:57 ip-10-31-45-123.us-east-1.aws.redhat.com audit[45612]: USER_START pid=45612 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:04:57 ip-10-31-45-123.us-east-1.aws.redhat.com python3.12[45615]: ansible-ansible.legacy.dnf Invoked with name=['kpartx'] state=present allow_downgrade=False allowerasing=False autoremove=False bugfix=False cacheonly=False disable_gpg_check=False disable_plugin=[] disablerepo=[] download_only=False enable_plugin=[] enablerepo=[] exclude=[] installroot=/ install_repoquery=True install_weak_deps=True security=False skip_broken=False update_cache=False update_only=False validate_certs=True sslverify=True lock_timeout=30 use_backend=auto best=None conf_file=None disable_excludes=None download_dir=None list=None nobest=None releasever=None Jul 25 07:04:58 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[45612]: pam_unix(sudo:session): session closed for user root Jul 25 07:04:58 ip-10-31-45-123.us-east-1.aws.redhat.com audit[45612]: USER_END pid=45612 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:04:58 ip-10-31-45-123.us-east-1.aws.redhat.com audit[45612]: CRED_DISP pid=45612 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:04:58 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:04:58 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:04:58 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:58 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:58 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=45617 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:04:58 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:58 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:58 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:58 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:58 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=45634 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:04:58 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:58 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:58 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:58 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:58 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=45650 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:04:58 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:58 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:59 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:59 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:59 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=45672 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:04:59 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:59 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:59 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:59 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:59 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=45688 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:04:59 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:59 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:04:59 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:04:59 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:04:59 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=45705 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:04:59 ip-10-31-45-123.us-east-1.aws.redhat.com audit[45723]: USER_ACCT pid=45723 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:04:59 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[45723]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-vfuwttjkrcfordtdekbtbiexdivpwdra ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905498.901428-9578-237019752569749/AnsiballZ_service_facts.py' Jul 25 07:04:59 ip-10-31-45-123.us-east-1.aws.redhat.com audit[45723]: USER_CMD pid=45723 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7666757774746A6B7263666F72647464656B6274626965786469767077647261203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353439382E3930313432382D393537382D3233373031393735323536393734392F416E736962616C6C5A5F736572766963655F66616374732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:04:59 ip-10-31-45-123.us-east-1.aws.redhat.com audit[45723]: CRED_REFR pid=45723 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:04:59 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[45723]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:04:59 ip-10-31-45-123.us-east-1.aws.redhat.com audit[45723]: USER_START pid=45723 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:04:59 ip-10-31-45-123.us-east-1.aws.redhat.com python3.12[45726]: ansible-service_facts Invoked Jul 25 07:05:01 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[45723]: pam_unix(sudo:session): session closed for user root Jul 25 07:05:01 ip-10-31-45-123.us-east-1.aws.redhat.com audit[45723]: USER_END pid=45723 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:01 ip-10-31-45-123.us-east-1.aws.redhat.com audit[45723]: CRED_DISP pid=45723 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:01 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:01 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:01 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:01 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:01 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=45848 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:01 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:01 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:01 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:01 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:01 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=45865 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:01 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:01 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:01 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:01 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:01 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=45881 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:01 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:01 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:01 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:01 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:01 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=45903 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:01 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:01 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:01 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:01 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:01 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=45919 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:01 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:01 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:01 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:05:01 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:05:01 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=45936 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:01 ip-10-31-45-123.us-east-1.aws.redhat.com audit[45954]: USER_ACCT pid=45954 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:01 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[45954]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-bxbqizohxwiikprgffnxtacyxcnzlbyr ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905501.7068787-9588-231128912454762/AnsiballZ_blivet.py' Jul 25 07:05:01 ip-10-31-45-123.us-east-1.aws.redhat.com audit[45954]: USER_CMD pid=45954 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62786271697A6F68787769696B70726766666E787461637978636E7A6C627972203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353530312E373036383738372D393538382D3233313132383931323435343736322F416E736962616C6C5A5F626C697665742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:05:01 ip-10-31-45-123.us-east-1.aws.redhat.com audit[45954]: CRED_REFR pid=45954 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:01 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[45954]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:05:01 ip-10-31-45-123.us-east-1.aws.redhat.com audit[45954]: USER_START pid=45954 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com python3.12[45957]: ansible-fedora.linux_system_roles.blivet Invoked with pools=[] volumes=[] use_partitions=None disklabel_type=None pool_defaults={'state': 'present', 'type': 'lvm', 'disks': [], 'volumes': [], 'grow_to_fill': False, 'encryption': False, 'encryption_password': None, 'encryption_key': None, 'encryption_cipher': None, 'encryption_key_size': None, 'encryption_luks_version': None, 'raid_level': None, 'raid_device_count': None, 'raid_spare_count': None, 'raid_chunk_size': None, 'raid_metadata_version': None, 'shared': False} volume_defaults={'state': 'present', 'type': 'lvm', 'size': 0, 'disks': [], 'fs_type': 'xfs', 'fs_label': '', 'fs_create_options': '', 'fs_overwrite_existing': True, 'mount_point': '', 'mount_options': 'defaults', 'mount_check': 0, 'mount_passno': 0, 'mount_device_identifier': 'uuid', 'raid_level': None, 'raid_device_count': None, 'raid_spare_count': None, 'raid_chunk_size': None, 'raid_stripe_size': None, 'raid_metadata_version': None, 'encryption': False, 'encryption_password': None, 'encryption_key': None, 'encryption_cipher': None, 'encryption_key_size': None, 'encryption_luks_version': None, 'compression': None, 'deduplication': None, 'vdo_pool_size': None, 'thin': None, 'thin_pool_name': None, 'thin_pool_size': None, 'cached': False, 'cache_size': 0, 'cache_mode': None, 'cache_devices': []} safe_mode=False packages_only=False diskvolume_mkfs_option_map={} Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[45954]: pam_unix(sudo:session): session closed for user root Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[45954]: USER_END pid=45954 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[45954]: CRED_DISP pid=45954 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=45960 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=45977 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=45993 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46015 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46031 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46048 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46066]: USER_ACCT pid=46066 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[46066]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-ftoxgsypsxabbczrhhedlxsjtyqbxbav ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905502.3305516-9597-44778508879451/AnsiballZ_stat.py' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46066]: USER_CMD pid=46066 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66746F78677379707378616262637A72686865646C78736A7479716278626176203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353530322E333330353531362D393539372D34343737383530383837393435312F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46066]: CRED_REFR pid=46066 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[46066]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46066]: USER_START pid=46066 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com python3.12[46069]: ansible-stat Invoked with path=/etc/fstab follow=False get_checksum=True get_mime=True get_attributes=True checksum_algorithm=sha1 Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[46066]: pam_unix(sudo:session): session closed for user root Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46066]: USER_END pid=46066 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46066]: CRED_DISP pid=46066 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46072 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46089 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:02 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46105 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46127 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46143 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46160 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46179]: USER_ACCT pid=46179 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[46179]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-ylqrvherfevawivpccwsjvtzlywfdsps ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905502.9788063-9615-122639204399916/AnsiballZ_stat.py' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46179]: USER_CMD pid=46179 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796C7172766865726665766177697670636377736A76747A6C79776664737073203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353530322E393738383036332D393631352D3132323633393230343339393931362F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46179]: CRED_REFR pid=46179 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[46179]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46179]: USER_START pid=46179 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com python3.12[46182]: ansible-stat Invoked with path=/etc/crypttab follow=False get_checksum=True get_mime=True get_attributes=True checksum_algorithm=sha1 Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[46179]: pam_unix(sudo:session): session closed for user root Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46179]: USER_END pid=46179 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46179]: CRED_DISP pid=46179 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46185 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46202 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46218 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46240 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46256 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46273 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46291]: USER_ACCT pid=46291 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[46291]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-fjodrjyozbnmwxmozjdlmakwjrtuavqo ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905503.4108748-9624-225691694876332/AnsiballZ_setup.py' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46291]: USER_CMD pid=46291 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666A6F64726A796F7A626E6D77786D6F7A6A646C6D616B776A7274756176716F203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353530332E343130383734382D393632342D3232353639313639343837363333322F416E736962616C6C5A5F73657475702E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46291]: CRED_REFR pid=46291 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[46291]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46291]: USER_START pid=46291 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:03 ip-10-31-45-123.us-east-1.aws.redhat.com python3.12[46294]: ansible-setup Invoked with gather_subset=['all'] gather_timeout=10 filter=[] fact_path=/etc/ansible/facts.d Jul 25 07:05:05 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[46291]: pam_unix(sudo:session): session closed for user root Jul 25 07:05:05 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46291]: USER_END pid=46291 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:05 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46291]: CRED_DISP pid=46291 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:05 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:05 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:05 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:05 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:05 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46319 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:05 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:05 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:05 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:05 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:05 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46336 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:05 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:05 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:05 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:05 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:05 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46352 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:06 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:06 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:06 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:06 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:06 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46374 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:06 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:06 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:06 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:06 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:06 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46390 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:06 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:06 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:06 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:05:06 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:05:06 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46407 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:06 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46425]: USER_ACCT pid=46425 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:06 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[46425]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-lmiesuhqsrbfjuaqrbmocvkzccdpbtds ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905505.9836023-9634-64322436343426/AnsiballZ_dnf.py' Jul 25 07:05:06 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46425]: USER_CMD pid=46425 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6D696573756871737262666A75617172626D6F63766B7A6363647062746473203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353530352E393833363032332D393633342D36343332323433363334333432362F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:05:06 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46425]: CRED_REFR pid=46425 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:06 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[46425]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:05:06 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46425]: USER_START pid=46425 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:06 ip-10-31-45-123.us-east-1.aws.redhat.com python3.12[46428]: ansible-ansible.legacy.dnf Invoked with name=['util-linux-core'] state=present allow_downgrade=False allowerasing=False autoremove=False bugfix=False cacheonly=False disable_gpg_check=False disable_plugin=[] disablerepo=[] download_only=False enable_plugin=[] enablerepo=[] exclude=[] installroot=/ install_repoquery=True install_weak_deps=True security=False skip_broken=False update_cache=False update_only=False validate_certs=True sslverify=True lock_timeout=30 use_backend=auto best=None conf_file=None disable_excludes=None download_dir=None list=None nobest=None releasever=None Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[46425]: pam_unix(sudo:session): session closed for user root Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46425]: USER_END pid=46425 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46425]: CRED_DISP pid=46425 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46430 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46447 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46463 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46485 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46501 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46518 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[46536]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-hulglrprntrkmkuvwqgncpptckqcxgxl ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905507.378331-9642-52517728694204/AnsiballZ_find_unused_disk.py' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46536]: USER_ACCT pid=46536 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46536]: USER_CMD pid=46536 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68756C676C7270726E74726B6D6B75767771676E63707074636B71637867786C203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353530372E3337383333312D393634322D35323531373732383639343230342F416E736962616C6C5A5F66696E645F756E757365645F6469736B2E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46536]: CRED_REFR pid=46536 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[46536]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46536]: USER_START pid=46536 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com python3.12[46540]: ansible-fedora.linux_system_roles.find_unused_disk Invoked with max_return=1 with_interface=scsi min_size=0 max_size=0 match_sector_size=False Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[46536]: pam_unix(sudo:session): session closed for user root Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46536]: USER_END pid=46536 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46536]: CRED_DISP pid=46536 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46544 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46561 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46577 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:07 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:08 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:08 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:08 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46599 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:08 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:08 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:08 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:08 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:08 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46615 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:08 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:08 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:08 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:05:08 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:05:08 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46632 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:08 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46650]: USER_ACCT pid=46650 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:08 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[46650]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-hsvaocmiwmeghkfdjsshgtzazafpeobp ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905507.896017-9650-36172735881520/AnsiballZ_command.py' Jul 25 07:05:08 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46650]: USER_CMD pid=46650 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D687376616F636D69776D6567686B66646A73736867747A617A616670656F6270203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353530372E3839363031372D393635302D33363137323733353838313532302F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:05:08 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46650]: CRED_REFR pid=46650 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:08 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[46650]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:05:08 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46650]: USER_START pid=46650 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:08 ip-10-31-45-123.us-east-1.aws.redhat.com python3.12[46653]: ansible-ansible.legacy.command Invoked with _raw_params=set -x exec 1>&2 lsblk -p --pairs --bytes -o NAME,TYPE,SIZE,FSTYPE,LOG-SEC journalctl -ex _uses_shell=True expand_argument_vars=True stdin_add_newline=True strip_empty_ends=True argv=None chdir=None executable=None creates=None removes=None stdin=None Jul 25 07:05:08 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[46650]: pam_unix(sudo:session): session closed for user root Jul 25 07:05:08 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46650]: USER_END pid=46650 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:08 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46650]: CRED_DISP pid=46650 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:08 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:08 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:08 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:08 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:08 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46656 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:08 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:08 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:11 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:11 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:11 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46673 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:11 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:11 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:11 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:11 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:11 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46689 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:11 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:11 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:11 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:11 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:11 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46711 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:11 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:11 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:11 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:11 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:11 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46729 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:11 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:11 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:11 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:11 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:11 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46746 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:11 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:11 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:11 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:11 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:11 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46762 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:11 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:11 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:11 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:05:11 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:05:11 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46779 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:11 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46797]: USER_ACCT pid=46797 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:11 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[46797]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-jczhyhwihqerhlyhwmccvkqqcjuuptts ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905511.4346588-9761-138778850500405/AnsiballZ_setup.py' Jul 25 07:05:11 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46797]: USER_CMD pid=46797 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A637A687968776968716572686C7968776D6363766B7171636A757570747473203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353531312E343334363538382D393736312D3133383737383835303530303430352F416E736962616C6C5A5F73657475702E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:05:11 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46797]: CRED_REFR pid=46797 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:11 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[46797]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:05:11 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46797]: USER_START pid=46797 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:12 ip-10-31-45-123.us-east-1.aws.redhat.com python3.12[46800]: ansible-ansible.legacy.setup Invoked with gather_subset=['all'] gather_timeout=10 filter=[] fact_path=/etc/ansible/facts.d Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[46797]: pam_unix(sudo:session): session closed for user root Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46797]: USER_END pid=46797 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46797]: CRED_DISP pid=46797 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46825 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46842 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46858 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46880 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46896 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46913 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46931]: USER_ACCT pid=46931 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[46931]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-ibgyckthcmihcuzvisyheznkhqjvnhrl ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905514.3672714-9780-197597265085595/AnsiballZ_stat.py' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46931]: USER_CMD pid=46931 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69626779636B7468636D696863757A7669737968657A6E6B68716A766E68726C203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353531342E333637323731342D393738302D3139373539373236353038353539352F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46931]: CRED_REFR pid=46931 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[46931]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46931]: USER_START pid=46931 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com python3.12[46934]: ansible-stat Invoked with path=/run/ostree-booted follow=False get_checksum=True get_mime=True get_attributes=True checksum_algorithm=sha1 Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[46931]: pam_unix(sudo:session): session closed for user root Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46931]: USER_END pid=46931 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[46931]: CRED_DISP pid=46931 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46935 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46952 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:14 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46968 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:15 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:15 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:15 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:15 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:15 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=46990 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:15 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:15 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:15 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:15 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:15 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=47006 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:15 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:15 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:15 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:05:15 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:05:15 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=47023 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:15 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47041]: USER_ACCT pid=47041 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:15 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[47041]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-uovltyjekeconkemzyjpxfcjhrbpvujw ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905514.9864147-9792-47195380675524/AnsiballZ_dnf.py' Jul 25 07:05:15 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47041]: USER_CMD pid=47041 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756F766C74796A656B65636F6E6B656D7A796A707866636A6872627076756A77203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353531342E393836343134372D393739322D34373139353338303637353532342F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:05:15 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47041]: CRED_REFR pid=47041 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:15 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[47041]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:05:15 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47041]: USER_START pid=47041 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:15 ip-10-31-45-123.us-east-1.aws.redhat.com python3.12[47044]: ansible-ansible.legacy.dnf Invoked with name=['python3-blivet', 'libblockdev-crypto', 'libblockdev-dm', 'libblockdev-lvm', 'libblockdev-mdraid', 'libblockdev-swap', 'stratisd', 'stratis-cli'] state=present allow_downgrade=False allowerasing=False autoremove=False bugfix=False cacheonly=False disable_gpg_check=False disable_plugin=[] disablerepo=[] download_only=False enable_plugin=[] enablerepo=[] exclude=[] installroot=/ install_repoquery=True install_weak_deps=True security=False skip_broken=False update_cache=False update_only=False validate_certs=True sslverify=True lock_timeout=30 use_backend=auto best=None conf_file=None disable_excludes=None download_dir=None list=None nobest=None releasever=None Jul 25 07:05:16 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[47041]: pam_unix(sudo:session): session closed for user root Jul 25 07:05:16 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47041]: USER_END pid=47041 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:16 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47041]: CRED_DISP pid=47041 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:16 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:16 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:16 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:16 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:16 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=47046 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:16 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:16 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:16 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:16 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:16 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=47063 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:16 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:16 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:16 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:16 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:16 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=47079 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:16 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:16 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:16 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:16 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:16 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=47101 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:16 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:16 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:16 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:16 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:16 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=47117 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:16 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:16 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:16 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:05:16 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:05:16 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=47134 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:16 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47152]: USER_ACCT pid=47152 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:16 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[47152]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-exljnxulhdftybuusifogbiqpmljvalp ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905516.549138-9802-163748417037839/AnsiballZ_blivet.py' Jul 25 07:05:16 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47152]: USER_CMD pid=47152 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65786C6A6E78756C68646674796275757369666F67626971706D6C6A76616C70203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353531362E3534393133382D393830322D3136333734383431373033373833392F416E736962616C6C5A5F626C697665742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:05:16 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47152]: CRED_REFR pid=47152 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:16 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[47152]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:05:16 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47152]: USER_START pid=47152 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:17 ip-10-31-45-123.us-east-1.aws.redhat.com python3.12[47155]: ansible-fedora.linux_system_roles.blivet Invoked with pools=[] volumes=[] use_partitions=None disklabel_type=None pool_defaults={'state': 'present', 'type': 'lvm', 'disks': [], 'volumes': [], 'grow_to_fill': False, 'encryption': False, 'encryption_password': None, 'encryption_key': None, 'encryption_cipher': None, 'encryption_key_size': None, 'encryption_luks_version': None, 'raid_level': None, 'raid_device_count': None, 'raid_spare_count': None, 'raid_chunk_size': None, 'raid_metadata_version': None, 'shared': False} volume_defaults={'state': 'present', 'type': 'lvm', 'size': 0, 'disks': [], 'fs_type': 'xfs', 'fs_label': '', 'fs_create_options': '', 'fs_overwrite_existing': True, 'mount_point': '', 'mount_options': 'defaults', 'mount_check': 0, 'mount_passno': 0, 'mount_device_identifier': 'uuid', 'raid_level': None, 'raid_device_count': None, 'raid_spare_count': None, 'raid_chunk_size': None, 'raid_stripe_size': None, 'raid_metadata_version': None, 'encryption': False, 'encryption_password': None, 'encryption_key': None, 'encryption_cipher': None, 'encryption_key_size': None, 'encryption_luks_version': None, 'compression': None, 'deduplication': None, 'vdo_pool_size': None, 'thin': None, 'thin_pool_name': None, 'thin_pool_size': None, 'cached': False, 'cache_size': 0, 'cache_mode': None, 'cache_devices': []} packages_only=True safe_mode=True diskvolume_mkfs_option_map={} Jul 25 07:05:17 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[47152]: pam_unix(sudo:session): session closed for user root Jul 25 07:05:17 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47152]: USER_END pid=47152 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:17 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47152]: CRED_DISP pid=47152 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:17 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:17 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:17 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:17 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:17 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=47158 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:17 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:17 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:17 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:17 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:17 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=47175 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:17 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:17 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:17 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:17 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:17 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=47191 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:17 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:17 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:17 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:17 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:17 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=47213 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:17 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:17 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:17 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:17 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:17 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=47229 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:17 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:17 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:17 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:05:17 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:05:17 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=47246 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:17 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47264]: USER_ACCT pid=47264 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:17 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[47264]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-bqkjnvzygcaywwhiavxpwgfprhyjkfvo ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905517.3969953-9814-253417045138540/AnsiballZ_dnf.py' Jul 25 07:05:17 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47264]: USER_CMD pid=47264 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62716B6A6E767A79676361797777686961767870776766707268796A6B66766F203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353531372E333936393935332D393831342D3235333431373034353133383534302F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:05:17 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47264]: CRED_REFR pid=47264 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:17 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[47264]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:05:17 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47264]: USER_START pid=47264 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:17 ip-10-31-45-123.us-east-1.aws.redhat.com python3.12[47267]: ansible-ansible.legacy.dnf Invoked with name=['kpartx'] state=present allow_downgrade=False allowerasing=False autoremove=False bugfix=False cacheonly=False disable_gpg_check=False disable_plugin=[] disablerepo=[] download_only=False enable_plugin=[] enablerepo=[] exclude=[] installroot=/ install_repoquery=True install_weak_deps=True security=False skip_broken=False update_cache=False update_only=False validate_certs=True sslverify=True lock_timeout=30 use_backend=auto best=None conf_file=None disable_excludes=None download_dir=None list=None nobest=None releasever=None Jul 25 07:05:18 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[47264]: pam_unix(sudo:session): session closed for user root Jul 25 07:05:18 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47264]: USER_END pid=47264 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:18 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47264]: CRED_DISP pid=47264 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:18 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:18 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:18 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:18 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:18 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=47269 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:18 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:18 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:18 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:18 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:18 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=47286 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:18 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:18 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:18 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:18 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:18 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=47302 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:18 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:18 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:18 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:18 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:18 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=47324 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:18 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:18 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:18 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:18 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:18 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=47340 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:18 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:18 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:18 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:05:18 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:05:18 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=47357 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:18 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47375]: USER_ACCT pid=47375 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:19 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[47375]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-agadjprikoaujsecyxhbontmyeqxlcrh ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905518.771491-9822-166158485511829/AnsiballZ_service_facts.py' Jul 25 07:05:18 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47375]: USER_CMD pid=47375 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616761646A7072696B6F61756A736563797868626F6E746D796571786C637268203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353531382E3737313439312D393832322D3136363135383438353531313832392F416E736962616C6C5A5F736572766963655F66616374732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:05:19 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47375]: CRED_REFR pid=47375 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:19 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[47375]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:05:19 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47375]: USER_START pid=47375 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:19 ip-10-31-45-123.us-east-1.aws.redhat.com python3.12[47379]: ansible-service_facts Invoked Jul 25 07:05:21 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[47375]: pam_unix(sudo:session): session closed for user root Jul 25 07:05:21 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47375]: USER_END pid=47375 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:21 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47375]: CRED_DISP pid=47375 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:21 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:21 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:21 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:21 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:21 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=47501 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:21 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:21 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:21 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:21 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:21 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=47518 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:21 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:21 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:21 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:21 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:21 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=47534 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:21 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:21 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:21 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:21 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:21 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=47556 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:21 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:21 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:21 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:21 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:21 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=47572 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:21 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:21 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:21 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:05:21 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:05:21 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=47589 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:21 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47607]: USER_ACCT pid=47607 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:21 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[47607]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-sjsgmgledckbzqlowynjwrjwcxtitunt ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905521.5612202-9832-185260608424184/AnsiballZ_blivet.py' Jul 25 07:05:21 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47607]: USER_CMD pid=47607 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736A73676D676C6564636B627A716C6F77796E6A77726A776378746974756E74203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353532312E353631323230322D393833322D3138353236303630383432343138342F416E736962616C6C5A5F626C697665742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:05:21 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47607]: CRED_REFR pid=47607 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:21 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[47607]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:05:21 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47607]: USER_START pid=47607 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com python3.12[47610]: ansible-fedora.linux_system_roles.blivet Invoked with pools=[] volumes=[] use_partitions=None disklabel_type=None pool_defaults={'state': 'present', 'type': 'lvm', 'disks': [], 'volumes': [], 'grow_to_fill': False, 'encryption': False, 'encryption_password': None, 'encryption_key': None, 'encryption_cipher': None, 'encryption_key_size': None, 'encryption_luks_version': None, 'raid_level': None, 'raid_device_count': None, 'raid_spare_count': None, 'raid_chunk_size': None, 'raid_metadata_version': None, 'shared': False} volume_defaults={'state': 'present', 'type': 'lvm', 'size': 0, 'disks': [], 'fs_type': 'xfs', 'fs_label': '', 'fs_create_options': '', 'fs_overwrite_existing': True, 'mount_point': '', 'mount_options': 'defaults', 'mount_check': 0, 'mount_passno': 0, 'mount_device_identifier': 'uuid', 'raid_level': None, 'raid_device_count': None, 'raid_spare_count': None, 'raid_chunk_size': None, 'raid_stripe_size': None, 'raid_metadata_version': None, 'encryption': False, 'encryption_password': None, 'encryption_key': None, 'encryption_cipher': None, 'encryption_key_size': None, 'encryption_luks_version': None, 'compression': None, 'deduplication': None, 'vdo_pool_size': None, 'thin': None, 'thin_pool_name': None, 'thin_pool_size': None, 'cached': False, 'cache_size': 0, 'cache_mode': None, 'cache_devices': []} safe_mode=True packages_only=False diskvolume_mkfs_option_map={} Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[47607]: pam_unix(sudo:session): session closed for user root Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47607]: USER_END pid=47607 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47607]: CRED_DISP pid=47607 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=47613 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=47630 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=47646 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=47668 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=47684 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=47701 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47719]: USER_ACCT pid=47719 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[47719]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-oddhunjngvjpakkfzhxleexjpgotmfwu ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905522.1759038-9841-104939213466789/AnsiballZ_stat.py' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47719]: USER_CMD pid=47719 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F646468756E6A6E67766A70616B6B667A68786C6565786A70676F746D667775203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353532322E313735393033382D393834312D3130343933393231333436363738392F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47719]: CRED_REFR pid=47719 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[47719]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47719]: USER_START pid=47719 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com python3.12[47722]: ansible-stat Invoked with path=/etc/fstab follow=False get_checksum=True get_mime=True get_attributes=True checksum_algorithm=sha1 Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[47719]: pam_unix(sudo:session): session closed for user root Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47719]: USER_END pid=47719 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47719]: CRED_DISP pid=47719 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=47725 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=47742 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=47758 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=47780 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=47796 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=47813 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47831]: USER_ACCT pid=47831 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[47831]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-mkyshflofcbvsrtfgrholhaisjpaprzn ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905522.83134-9859-232517243835312/AnsiballZ_stat.py' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47831]: USER_CMD pid=47831 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6B797368666C6F66636276737274666772686F6C686169736A706170727A6E203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353532322E38333133342D393835392D3233323531373234333833353331322F416E736962616C6C5A5F737461742E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47831]: CRED_REFR pid=47831 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[47831]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:05:22 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47831]: USER_START pid=47831 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:23 ip-10-31-45-123.us-east-1.aws.redhat.com python3.12[47834]: ansible-stat Invoked with path=/etc/crypttab follow=False get_checksum=True get_mime=True get_attributes=True checksum_algorithm=sha1 Jul 25 07:05:23 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[47831]: pam_unix(sudo:session): session closed for user root Jul 25 07:05:23 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47831]: USER_END pid=47831 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:23 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47831]: CRED_DISP pid=47831 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:23 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:23 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:23 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:23 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:23 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=47837 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:23 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:23 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:23 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:23 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:23 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=47854 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:23 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:23 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:23 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:23 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:23 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=47870 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:23 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:23 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:23 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:23 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:23 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=47892 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:23 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:23 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:23 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:23 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:23 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=47908 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:23 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:23 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:23 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:05:23 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:05:23 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=47925 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:23 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47943]: USER_ACCT pid=47943 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:23 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[47943]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-sgkkrrekhtybxllycfgspqekbefocyix ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905523.260233-9868-232043638489641/AnsiballZ_setup.py' Jul 25 07:05:23 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47943]: USER_CMD pid=47943 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73676B6B7272656B68747962786C6C79636667737071656B6265666F63796978203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353532332E3236303233332D393836382D3233323034333633383438393634312F416E736962616C6C5A5F73657475702E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:05:23 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47943]: CRED_REFR pid=47943 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:23 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[47943]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:05:23 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47943]: USER_START pid=47943 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:23 ip-10-31-45-123.us-east-1.aws.redhat.com python3.12[47946]: ansible-setup Invoked with gather_subset=['all'] gather_timeout=10 filter=[] fact_path=/etc/ansible/facts.d Jul 25 07:05:25 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[47943]: pam_unix(sudo:session): session closed for user root Jul 25 07:05:25 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47943]: USER_END pid=47943 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:25 ip-10-31-45-123.us-east-1.aws.redhat.com audit[47943]: CRED_DISP pid=47943 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:25 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:25 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:25 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:25 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:25 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=47971 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:25 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:25 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:25 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:25 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:25 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=47988 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:25 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:25 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:25 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:25 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:25 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=48004 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:25 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:25 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:25 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:25 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:25 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=48026 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:25 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:25 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:25 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:25 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:25 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=48042 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:25 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:25 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:25 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:05:25 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:05:25 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=48059 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:25 ip-10-31-45-123.us-east-1.aws.redhat.com audit[48077]: USER_ACCT pid=48077 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:25 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[48077]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-fuimydbbjuxpbtaulrlplkyyeaprixqx ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905525.706221-9877-217689087371762/AnsiballZ_dnf.py' Jul 25 07:05:25 ip-10-31-45-123.us-east-1.aws.redhat.com audit[48077]: USER_CMD pid=48077 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6675696D796462626A757870627461756C726C706C6B79796561707269787178203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353532352E3730363232312D393837372D3231373638393038373337313736322F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:05:25 ip-10-31-45-123.us-east-1.aws.redhat.com audit[48077]: CRED_REFR pid=48077 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:25 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[48077]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:05:25 ip-10-31-45-123.us-east-1.aws.redhat.com audit[48077]: USER_START pid=48077 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:26 ip-10-31-45-123.us-east-1.aws.redhat.com python3.12[48080]: ansible-ansible.legacy.dnf Invoked with name=['util-linux-core'] state=present allow_downgrade=False allowerasing=False autoremove=False bugfix=False cacheonly=False disable_gpg_check=False disable_plugin=[] disablerepo=[] download_only=False enable_plugin=[] enablerepo=[] exclude=[] installroot=/ install_repoquery=True install_weak_deps=True security=False skip_broken=False update_cache=False update_only=False validate_certs=True sslverify=True lock_timeout=30 use_backend=auto best=None conf_file=None disable_excludes=None download_dir=None list=None nobest=None releasever=None Jul 25 07:05:27 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[48077]: pam_unix(sudo:session): session closed for user root Jul 25 07:05:27 ip-10-31-45-123.us-east-1.aws.redhat.com audit[48077]: USER_END pid=48077 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:27 ip-10-31-45-123.us-east-1.aws.redhat.com audit[48077]: CRED_DISP pid=48077 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:27 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:27 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:27 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:27 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:27 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=48082 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:27 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:27 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:27 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:27 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:27 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=48099 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:27 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:27 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:27 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:27 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:27 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=48115 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:27 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:27 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:27 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:27 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:27 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=48137 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:27 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:27 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:27 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:27 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:27 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=48153 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:27 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:27 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:27 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:05:27 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:05:27 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=48170 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:27 ip-10-31-45-123.us-east-1.aws.redhat.com audit[48188]: USER_ACCT pid=48188 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:27 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[48188]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-cylnsudwgvhlmkkkdxlyfvoerzkeopdk ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905527.0958247-9885-269204501921873/AnsiballZ_find_unused_disk.py' Jul 25 07:05:27 ip-10-31-45-123.us-east-1.aws.redhat.com audit[48188]: USER_CMD pid=48188 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63796C6E737564776776686C6D6B6B6B64786C7966766F65727A6B656F70646B203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353532372E303935383234372D393838352D3236393230343530313932313837332F416E736962616C6C5A5F66696E645F756E757365645F6469736B2E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:05:27 ip-10-31-45-123.us-east-1.aws.redhat.com audit[48188]: CRED_REFR pid=48188 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:27 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[48188]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:05:27 ip-10-31-45-123.us-east-1.aws.redhat.com audit[48188]: USER_START pid=48188 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:27 ip-10-31-45-123.us-east-1.aws.redhat.com python3.12[48191]: ansible-fedora.linux_system_roles.find_unused_disk Invoked with min_size=5g max_return=1 max_size=0 match_sector_size=False with_interface=None Jul 25 07:05:28 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[48188]: pam_unix(sudo:session): session closed for user root Jul 25 07:05:28 ip-10-31-45-123.us-east-1.aws.redhat.com audit[48188]: USER_END pid=48188 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:28 ip-10-31-45-123.us-east-1.aws.redhat.com audit[48188]: CRED_DISP pid=48188 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:28 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:28 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:28 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:28 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:28 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=48195 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:28 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:28 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:28 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:28 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:28 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=48212 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:28 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:28 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:28 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:28 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:28 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=48228 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:28 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:28 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:28 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:28 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:28 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=48250 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:28 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:28 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:28 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:28 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:28 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=48266 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:28 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_END pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:28 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGOUT pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=ssh res=success' Jul 25 07:05:28 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_LOGIN pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:05:28 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: USER_START pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=/dev/pts/0 res=success' Jul 25 07:05:28 ip-10-31-45-123.us-east-1.aws.redhat.com audit[1455]: CRYPTO_KEY_USER pid=1455 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c2:f4:c5:96:4b:44:1a:15:2d:d3:06:f5:c0:1d:d8:df:2e:fc:ed:b4:bd:3e:65:c8:51:66:2b:5b:60:b6:ba:7f direction=? spid=48283 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.31.44.243 terminal=? res=success' Jul 25 07:05:28 ip-10-31-45-123.us-east-1.aws.redhat.com audit[48301]: USER_ACCT pid=48301 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:28 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[48301]: root : TTY=pts/0 ; PWD=/root ; USER=root ; COMMAND=/bin/sh -c 'echo BECOME-SUCCESS-rpcvtegcsioqppkdfltytdnqdfbzcwwy ; /usr/bin/python3.12 /root/.ansible/tmp/ansible-tmp-1721905528.6100183-9893-153037566865637/AnsiballZ_command.py' Jul 25 07:05:28 ip-10-31-45-123.us-east-1.aws.redhat.com audit[48301]: USER_CMD pid=48301 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D727063767465676373696F7170706B64666C747974646E716466627A63777779203B202F7573722F62696E2F707974686F6E332E3132202F726F6F742F2E616E7369626C652F746D702F616E7369626C652D746D702D313732313930353532382E363130303138332D393839332D3135333033373536363836353633372F416E736962616C6C5A5F636F6D6D616E642E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success' Jul 25 07:05:28 ip-10-31-45-123.us-east-1.aws.redhat.com audit[48301]: CRED_REFR pid=48301 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:28 ip-10-31-45-123.us-east-1.aws.redhat.com sudo[48301]: pam_unix(sudo:session): session opened for user root(uid=0) by root(uid=0) Jul 25 07:05:28 ip-10-31-45-123.us-east-1.aws.redhat.com audit[48301]: USER_START pid=48301 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' Jul 25 07:05:29 ip-10-31-45-123.us-east-1.aws.redhat.com python3.12[48304]: ansible-ansible.legacy.command Invoked with _raw_params=set -x exec 1>&2 lsblk -p --pairs --bytes -o NAME,TYPE,SIZE,FSTYPE,LOG-SEC journalctl -ex _uses_shell=True expand_argument_vars=True stdin_add_newline=True strip_empty_ends=True argv=None chdir=None executable=None creates=None removes=None stdin=None TASK [Set unused_disks if necessary] ******************************************* Thursday 25 July 2024 07:05:29 -0400 (0:00:00.557) 0:00:17.744 ********* skipping: [managed_node1] => { "changed": false, "false_condition": "'Unable to find unused disk' not in unused_disks_return.disks", "skip_reason": "Conditional result was False" } TASK [Exit playbook when there's not enough unused disks in the system] ******** Thursday 25 July 2024 07:05:29 -0400 (0:00:00.020) 0:00:17.764 ********* fatal: [managed_node1]: FAILED! => { "changed": false } MSG: Unable to find enough unused disks. Exiting playbook. PLAY RECAP ********************************************************************* managed_node1 : ok=28 changed=0 unreachable=0 failed=1 skipped=20 rescued=0 ignored=0 Thursday 25 July 2024 07:05:29 -0400 (0:00:00.024) 0:00:17.789 ********* =============================================================================== fedora.linux_system_roles.storage : Get service facts ------------------- 2.72s Gathering Facts --------------------------------------------------------- 2.71s fedora.linux_system_roles.storage : Update facts ------------------------ 2.39s fedora.linux_system_roles.storage : Make sure blivet is available ------- 1.52s Find unused disks in the system ----------------------------------------- 1.52s Ensure test packages ---------------------------------------------------- 1.40s fedora.linux_system_roles.storage : Make sure required packages are installed --- 1.38s fedora.linux_system_roles.storage : Get required packages --------------- 0.73s fedora.linux_system_roles.storage : Manage the pools and volumes to match the specified state --- 0.60s Debug why there are no unused disks ------------------------------------- 0.56s fedora.linux_system_roles.storage : Check if system is ostree ----------- 0.50s fedora.linux_system_roles.storage : Check if /etc/fstab is present ------ 0.42s fedora.linux_system_roles.storage : Retrieve facts for the /etc/crypttab file --- 0.41s fedora.linux_system_roles.storage : Include the appropriate provider tasks --- 0.05s fedora.linux_system_roles.storage : Set storage_cryptsetup_services ----- 0.04s fedora.linux_system_roles.storage : Set platform/version specific variables --- 0.04s Get unused disks -------------------------------------------------------- 0.04s Run the role ------------------------------------------------------------ 0.04s fedora.linux_system_roles.storage : Enable copr repositories if needed --- 0.03s fedora.linux_system_roles.storage : Check if the COPR support packages should be installed --- 0.03s