ansible-playbook [core 2.17.14] config file = None configured module search path = ['/root/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] ansible python module location = /usr/local/lib/python3.13/site-packages/ansible ansible collection location = /tmp/collections-pqV executable location = /usr/local/bin/ansible-playbook python version = 3.13.9 (main, Oct 14 2025, 00:00:00) [GCC 14.3.1 20250808 (Red Hat 14.3.1-3)] (/usr/bin/python3.13) jinja version = 3.1.6 libyaml = True No config file found; using defaults running playbook inside collection fedora.linux_system_roles Skipping callback 'debug', as we already have a stdout callback. Skipping callback 'json', as we already have a stdout callback. Skipping callback 'jsonl', as we already have a stdout callback. Skipping callback 'default', as we already have a stdout callback. Skipping callback 'minimal', as we already have a stdout callback. Skipping callback 'oneline', as we already have a stdout callback. PLAYBOOK: tests_default.yml **************************************************** 1 plays in /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/tests/logging/tests_default.yml PLAY [Ensure that the role runs with default parameters] *********************** TASK [Default run (NOOP)] ****************************************************** task path: /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/tests/logging/tests_default.yml:9 Tuesday 06 January 2026 18:41:09 -0500 (0:00:00.037) 0:00:00.037 ******* included: fedora.linux_system_roles.logging for managed-node1 TASK [fedora.linux_system_roles.logging : Set global variables] **************** task path: /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/main.yml:2 Tuesday 06 January 2026 18:41:09 -0500 (0:00:00.031) 0:00:00.069 ******* included: /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/set_vars.yml for managed-node1 TASK [fedora.linux_system_roles.logging : Run systemctl] *********************** task path: /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/set_vars.yml:7 Tuesday 06 January 2026 18:41:10 -0500 (0:00:00.013) 0:00:00.082 ******* [WARNING]: Platform linux on host managed-node1 is using the discovered Python interpreter at /usr/bin/python3, but future installation of another Python interpreter could change the meaning of that path. See https://docs.ansible.com/ansible- core/2.17/reference_appendices/interpreter_discovery.html for more information. ok: [managed-node1] => { "ansible_facts": { "discovered_interpreter_python": "/usr/bin/python3" }, "changed": false, "cmd": [ "systemctl", "is-system-running" ], "delta": "0:00:00.010035", "end": "2026-01-06 18:41:10.585510", "failed_when_result": false, "rc": 0, "start": "2026-01-06 18:41:10.575475" } STDOUT: running TASK [fedora.linux_system_roles.logging : Require installed systemd] *********** task path: /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/set_vars.yml:14 Tuesday 06 January 2026 18:41:10 -0500 (0:00:00.641) 0:00:00.724 ******* skipping: [managed-node1] => { "changed": false, "false_condition": "\"No such file or directory\" in __is_system_running.msg | d(\"\")", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.logging : Set flag to indicate that systemd runtime operations are available] *** task path: /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/set_vars.yml:19 Tuesday 06 January 2026 18:41:10 -0500 (0:00:00.039) 0:00:00.763 ******* ok: [managed-node1] => { "ansible_facts": { "__logging_is_booted": true }, "changed": false } TASK [fedora.linux_system_roles.logging : Set files output if files output is not defined and logging_inputs is not empty] *** task path: /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/main.yml:10 Tuesday 06 January 2026 18:41:10 -0500 (0:00:00.029) 0:00:00.793 ******* skipping: [managed-node1] => { "changed": false, "false_condition": "logging_inputs | d([]) | length > 0", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.logging : Set rsyslog_outputs] ***************** task path: /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/main.yml:17 Tuesday 06 January 2026 18:41:10 -0500 (0:00:00.047) 0:00:00.841 ******* ok: [managed-node1] => { "ansible_facts": { "rsyslog_outputs": [] }, "changed": false } TASK [fedora.linux_system_roles.logging : Set rsyslog_inputs] ****************** task path: /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/main.yml:21 Tuesday 06 January 2026 18:41:10 -0500 (0:00:00.056) 0:00:00.897 ******* ok: [managed-node1] => { "ansible_facts": { "rsyslog_inputs": [] }, "changed": false } TASK [fedora.linux_system_roles.logging : Use of rsyslog_custom_config_files is deprecated] *** task path: /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/main.yml:25 Tuesday 06 January 2026 18:41:10 -0500 (0:00:00.057) 0:00:00.955 ******* skipping: [managed-node1] => { "false_condition": "rsyslog_custom_config_files is defined" } TASK [fedora.linux_system_roles.logging : Use of type custom is deprecated] **** task path: /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/main.yml:32 Tuesday 06 January 2026 18:41:10 -0500 (0:00:00.052) 0:00:01.007 ******* skipping: [managed-node1] => { "false_condition": "__custom_output_files | length > 0" } TASK [fedora.linux_system_roles.logging : Check logging_inputs item in logging_flows.inputs] *** task path: /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/main.yml:45 Tuesday 06 January 2026 18:41:10 -0500 (0:00:00.055) 0:00:01.063 ******* skipping: [managed-node1] => { "changed": false, "skipped_reason": "No items in the list" } TASK [fedora.linux_system_roles.logging : Gather ports specified in the logging_inputs and outputs vars] *** task path: /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/main.yml:55 Tuesday 06 January 2026 18:41:11 -0500 (0:00:00.025) 0:00:01.088 ******* included: /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/gather_ports.yml for managed-node1 TASK [fedora.linux_system_roles.logging : Initialize ports variables] ********** task path: /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/gather_ports.yml:3 Tuesday 06 January 2026 18:41:11 -0500 (0:00:00.060) 0:00:01.149 ******* ok: [managed-node1] => { "ansible_facts": { "logging_tcp_ports": [], "logging_tls_tcp_ports": [], "logging_tls_udp_ports": [], "logging_udp_ports": [] }, "changed": false } TASK [fedora.linux_system_roles.logging : Parameter 'port' values] ************* task path: /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/gather_ports.yml:15 Tuesday 06 January 2026 18:41:11 -0500 (0:00:00.058) 0:00:01.207 ******* skipping: [managed-node1] => { "changed": false, "false_condition": "(logging_manage_firewall | bool) or (logging_manage_selinux | bool)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.logging : Update port values from outputs] ***** task path: /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/gather_ports.yml:35 Tuesday 06 January 2026 18:41:11 -0500 (0:00:00.036) 0:00:01.243 ******* skipping: [managed-node1] => { "changed": false, "false_condition": "(logging_manage_firewall | bool) or (logging_manage_selinux | bool)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.logging : Update port values from inputs] ****** task path: /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/gather_ports.yml:55 Tuesday 06 January 2026 18:41:11 -0500 (0:00:00.035) 0:00:01.279 ******* skipping: [managed-node1] => { "changed": false, "false_condition": "(logging_manage_firewall | bool) or (logging_manage_selinux | bool)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.logging : Manage firewall on the gathered ports] *** task path: /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/main.yml:58 Tuesday 06 January 2026 18:41:11 -0500 (0:00:00.035) 0:00:01.314 ******* included: /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/firewall.yml for managed-node1 TASK [fedora.linux_system_roles.logging : Initialize logging_firewall_ports] *** task path: /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/firewall.yml:7 Tuesday 06 January 2026 18:41:11 -0500 (0:00:00.044) 0:00:01.358 ******* skipping: [managed-node1] => { "changed": false, "false_condition": "logging_manage_firewall | bool", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.logging : Add tcp ports to logging_firewall_ports] *** task path: /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/firewall.yml:11 Tuesday 06 January 2026 18:41:11 -0500 (0:00:00.028) 0:00:01.387 ******* skipping: [managed-node1] => { "changed": false, "skipped_reason": "No items in the list" } TASK [fedora.linux_system_roles.logging : Add udp ports to logging_firewall_ports] *** task path: /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/firewall.yml:17 Tuesday 06 January 2026 18:41:11 -0500 (0:00:00.026) 0:00:01.414 ******* skipping: [managed-node1] => { "changed": false, "skipped_reason": "No items in the list" } TASK [Manage firewall for specified ports] ************************************* task path: /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/firewall.yml:23 Tuesday 06 January 2026 18:41:11 -0500 (0:00:00.028) 0:00:01.443 ******* skipping: [managed-node1] => { "changed": false, "false_condition": "logging_manage_firewall | bool", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.logging : Manage selinux on the gathered ports] *** task path: /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/main.yml:61 Tuesday 06 January 2026 18:41:11 -0500 (0:00:00.034) 0:00:01.477 ******* included: /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/selinux.yml for managed-node1 TASK [fedora.linux_system_roles.logging : Initialize logging_selinux_ports] **** task path: /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/selinux.yml:7 Tuesday 06 January 2026 18:41:11 -0500 (0:00:00.075) 0:00:01.553 ******* skipping: [managed-node1] => { "changed": false, "false_condition": "logging_manage_selinux | bool", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.logging : Add non tls tcp ports to logging_selinux_ports] *** task path: /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/selinux.yml:11 Tuesday 06 January 2026 18:41:11 -0500 (0:00:00.080) 0:00:01.634 ******* skipping: [managed-node1] => { "changed": false, "skipped_reason": "No items in the list" } TASK [fedora.linux_system_roles.logging : Add tls tcp ports to logging_selinux_ports] *** task path: /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/selinux.yml:16 Tuesday 06 January 2026 18:41:11 -0500 (0:00:00.022) 0:00:01.656 ******* skipping: [managed-node1] => { "changed": false, "skipped_reason": "No items in the list" } TASK [fedora.linux_system_roles.logging : Add non tls udp ports to logging_selinux_ports] *** task path: /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/selinux.yml:21 Tuesday 06 January 2026 18:41:11 -0500 (0:00:00.024) 0:00:01.681 ******* skipping: [managed-node1] => { "changed": false, "skipped_reason": "No items in the list" } TASK [fedora.linux_system_roles.logging : Add tls udp ports to logging_selinux_ports] *** task path: /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/selinux.yml:26 Tuesday 06 January 2026 18:41:11 -0500 (0:00:00.029) 0:00:01.711 ******* skipping: [managed-node1] => { "changed": false, "skipped_reason": "No items in the list" } TASK [Manage selinux for specified ports] ************************************** task path: /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/selinux.yml:31 Tuesday 06 January 2026 18:41:11 -0500 (0:00:00.024) 0:00:01.735 ******* skipping: [managed-node1] => { "changed": false, "false_condition": "logging_manage_selinux | bool", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.logging : Generate certificates] *************** task path: /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/main.yml:65 Tuesday 06 January 2026 18:41:11 -0500 (0:00:00.047) 0:00:01.783 ******* included: /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/certificate.yml for managed-node1 TASK [fedora.linux_system_roles.logging : Certificates are only supported in a booted system] *** task path: /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/certificate.yml:2 Tuesday 06 January 2026 18:41:11 -0500 (0:00:00.080) 0:00:01.863 ******* skipping: [managed-node1] => { "changed": false, "false_condition": "not __logging_is_booted", "skip_reason": "Conditional result was False" } TASK [Generate certificates] *************************************************** task path: /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/certificate.yml:9 Tuesday 06 January 2026 18:41:11 -0500 (0:00:00.047) 0:00:01.911 ******* skipping: [managed-node1] => { "changed": false, "false_condition": "logging_certificates | length > 0", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.logging : Re-read facts after adding custom fact] *** task path: /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/main.yml:71 Tuesday 06 January 2026 18:41:11 -0500 (0:00:00.031) 0:00:01.942 ******* skipping: [managed-node1] => { "changed": false, "false_condition": "logging_debug | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.logging : Create rsyslog debug dir] ************ task path: /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/main.yml:75 Tuesday 06 January 2026 18:41:11 -0500 (0:00:00.042) 0:00:01.985 ******* skipping: [managed-node1] => { "changed": false, "false_condition": "logging_debug | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.logging : Delete debug file] ******************* task path: /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/main.yml:81 Tuesday 06 January 2026 18:41:11 -0500 (0:00:00.041) 0:00:02.026 ******* skipping: [managed-node1] => { "changed": false, "false_condition": "logging_debug | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.logging : Create rsyslog debug file] *********** task path: /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/main.yml:86 Tuesday 06 January 2026 18:41:11 -0500 (0:00:00.042) 0:00:02.069 ******* skipping: [managed-node1] => { "changed": false, "false_condition": "logging_debug | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.logging : Use a debug var to avoid an empty dict in with_dict] *** task path: /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/main.yml:93 Tuesday 06 January 2026 18:41:12 -0500 (0:00:00.041) 0:00:02.110 ******* skipping: [managed-node1] => { "changed": false, "false_condition": "logging_debug | d(false)", "skip_reason": "Conditional result was False" } TASK [fedora.linux_system_roles.logging : Populate rsyslog debug file] ********* task path: /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/main.yml:97 Tuesday 06 January 2026 18:41:12 -0500 (0:00:00.044) 0:00:02.154 ******* skipping: [managed-node1] => { "changed": false, "false_condition": "logging_debug | d(false)", "skip_reason": "Conditional result was False" } TASK [Include Rsyslog role] **************************************************** task path: /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/main.yml:108 Tuesday 06 January 2026 18:41:12 -0500 (0:00:00.068) 0:00:02.223 ******* included: fedora.linux_system_roles.private_logging_subrole_rsyslog for managed-node1 TASK [fedora.linux_system_roles.private_logging_subrole_rsyslog : Set platform/version specific variables] *** task path: /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/private_logging_subrole_rsyslog/tasks/main.yml:4 Tuesday 06 January 2026 18:41:12 -0500 (0:00:00.055) 0:00:02.278 ******* included: /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/private_logging_subrole_rsyslog/tasks/set_vars.yml for managed-node1 TASK [fedora.linux_system_roles.private_logging_subrole_rsyslog : Ensure ansible_facts used by role] *** task path: /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/private_logging_subrole_rsyslog/tasks/set_vars.yml:4 Tuesday 06 January 2026 18:41:12 -0500 (0:00:00.050) 0:00:02.329 ******* fatal: [managed-node1]: FAILED! => { "changed": false } MSG: Bad subset 'domain' given to Ansible. gather_subset options allowed: all, all_ipv4_addresses, all_ipv6_addresses, apparmor, architecture, caps, chroot, cmdline, date_time, default_ipv4, default_ipv6, devices, distribution, distribution_major_version, distribution_release, distribution_version, dns, effective_group_ids, effective_user_id, env, facter, fibre_channel_wwn, fips, hardware, interfaces, is_chroot, iscsi, kernel, kernel_version, loadavg, local, lsb, machine, machine_id, mounts, network, nvme, ohai, os_family, pkg_mgr, platform, processor, processor_cores, processor_count, python, python_version, real_user_id, selinux, service_mgr, ssh_host_key_dsa_public, ssh_host_key_ecdsa_public, ssh_host_key_ed25519_public, ssh_host_key_rsa_public, ssh_host_pub_keys, ssh_pub_keys, system, system_capabilities, system_capabilities_enforced, user, user_dir, user_gecos, user_gid, user_id, user_shell, user_uid, virtual, virtualization_role, virtualization_tech_guest, virtualization_tech_host, virtualization_type PLAY RECAP ********************************************************************* managed-node1 : ok=13 changed=0 unreachable=0 failed=1 skipped=26 rescued=0 ignored=0 SYSTEM ROLES ERRORS BEGIN v1 [ { "ansible_version": "2.17.14", "end_time": "2026-01-06T23:41:13.141927+00:00Z", "host": "managed-node1", "message": "Bad subset 'domain' given to Ansible. gather_subset options allowed: all, all_ipv4_addresses, all_ipv6_addresses, apparmor, architecture, caps, chroot, cmdline, date_time, default_ipv4, default_ipv6, devices, distribution, distribution_major_version, distribution_release, distribution_version, dns, effective_group_ids, effective_user_id, env, facter, fibre_channel_wwn, fips, hardware, interfaces, is_chroot, iscsi, kernel, kernel_version, loadavg, local, lsb, machine, machine_id, mounts, network, nvme, ohai, os_family, pkg_mgr, platform, processor, processor_cores, processor_count, python, python_version, real_user_id, selinux, service_mgr, ssh_host_key_dsa_public, ssh_host_key_ecdsa_public, ssh_host_key_ed25519_public, ssh_host_key_rsa_public, ssh_host_pub_keys, ssh_pub_keys, system, system_capabilities, system_capabilities_enforced, user, user_dir, user_gecos, user_gid, user_id, user_shell, user_uid, virtual, virtualization_role, virtualization_tech_guest, virtualization_tech_host, virtualization_type", "start_time": "2026-01-06T23:41:12.255955+00:00Z", "task_name": "Ensure ansible_facts used by role", "task_path": "/tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/private_logging_subrole_rsyslog/tasks/set_vars.yml:4" } ] SYSTEM ROLES ERRORS END v1 TASKS RECAP ******************************************************************** Tuesday 06 January 2026 18:41:13 -0500 (0:00:00.887) 0:00:03.217 ******* =============================================================================== fedora.linux_system_roles.private_logging_subrole_rsyslog : Ensure ansible_facts used by role --- 0.89s /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/private_logging_subrole_rsyslog/tasks/set_vars.yml:4 fedora.linux_system_roles.logging : Run systemctl ----------------------- 0.64s /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/set_vars.yml:7 fedora.linux_system_roles.logging : Initialize logging_selinux_ports ---- 0.08s /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/selinux.yml:7 fedora.linux_system_roles.logging : Generate certificates --------------- 0.08s /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/main.yml:65 fedora.linux_system_roles.logging : Manage selinux on the gathered ports --- 0.08s /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/main.yml:61 fedora.linux_system_roles.logging : Populate rsyslog debug file --------- 0.07s /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/main.yml:97 fedora.linux_system_roles.logging : Gather ports specified in the logging_inputs and outputs vars --- 0.06s /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/main.yml:55 fedora.linux_system_roles.logging : Initialize ports variables ---------- 0.06s /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/gather_ports.yml:3 fedora.linux_system_roles.logging : Set rsyslog_inputs ------------------ 0.06s /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/main.yml:21 fedora.linux_system_roles.logging : Set rsyslog_outputs ----------------- 0.06s /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/main.yml:17 fedora.linux_system_roles.logging : Use of type custom is deprecated ---- 0.06s /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/main.yml:32 Include Rsyslog role ---------------------------------------------------- 0.06s /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/main.yml:108 fedora.linux_system_roles.logging : Use of rsyslog_custom_config_files is deprecated --- 0.05s /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/main.yml:25 fedora.linux_system_roles.private_logging_subrole_rsyslog : Set platform/version specific variables --- 0.05s /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/private_logging_subrole_rsyslog/tasks/main.yml:4 fedora.linux_system_roles.logging : Set files output if files output is not defined and logging_inputs is not empty --- 0.05s /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/main.yml:10 fedora.linux_system_roles.logging : Certificates are only supported in a booted system --- 0.05s /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/certificate.yml:2 Manage selinux for specified ports -------------------------------------- 0.05s /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/selinux.yml:31 fedora.linux_system_roles.logging : Manage firewall on the gathered ports --- 0.04s /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/main.yml:58 fedora.linux_system_roles.logging : Use a debug var to avoid an empty dict in with_dict --- 0.04s /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/main.yml:93 fedora.linux_system_roles.logging : Re-read facts after adding custom fact --- 0.04s /tmp/collections-pqV/ansible_collections/fedora/linux_system_roles/roles/logging/tasks/main.yml:71 Jan 06 18:41:09 managed-node1 audit[36520]: USER_LOGIN pid=36520 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:09 managed-node1 audit[36520]: USER_START pid=36520 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:09 managed-node1 audit[36524]: CRYPTO_KEY_USER pid=36524 uid=0 auid=0 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:66:41:b4:e8:51:f2:1e:f1:95:37:07:dd:da:da:1a:0d:59:b7:72:7c:c8:a6:b8:84:56:b9:77:f4:b3:51:5e:dd direction=? spid=36524 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=? res=success' Jan 06 18:41:09 managed-node1 sshd-session[36523]: Received disconnect from 10.31.40.165 port 53348:11: disconnected by user Jan 06 18:41:09 managed-node1 audit[36520]: CRYPTO_KEY_USER pid=36520 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=36523 suid=0 rport=53348 laddr=10.31.41.247 lport=22 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=? res=success' Jan 06 18:41:09 managed-node1 sshd-session[36523]: Disconnected from user root 10.31.40.165 port 53348 Jan 06 18:41:09 managed-node1 sshd-session[36520]: pam_unix(sshd:session): session closed for user root Jan 06 18:41:09 managed-node1 audit[36520]: USER_END pid=36520 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/libexec/openssh/sshd-session" hostname=10.31.40.165 addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:09 managed-node1 audit[36520]: CRED_DISP pid=36520 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/libexec/openssh/sshd-session" hostname=10.31.40.165 addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:09 managed-node1 audit[36520]: USER_END pid=36520 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:09 managed-node1 audit[36520]: USER_LOGOUT pid=36520 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:09 managed-node1 systemd-logind[605]: Session 8 logged out. Waiting for processes to exit. Jan 06 18:41:09 managed-node1 systemd[1]: session-8.scope: Deactivated successfully. ░░ Subject: Unit succeeded ░░ Defined-By: systemd ░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel ░░ ░░ The unit session-8.scope has successfully entered the 'dead' state. Jan 06 18:41:09 managed-node1 systemd-logind[605]: Removed session 8. ░░ Subject: Session 8 has been terminated ░░ Defined-By: systemd ░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel ░░ Documentation: sd-login(3) ░░ ░░ A session with the ID 8 has been terminated. Jan 06 18:41:10 managed-node1 audit[3844]: USER_LOGIN pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:10 managed-node1 audit[3844]: USER_START pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:10 managed-node1 audit[36550]: CRYPTO_KEY_USER pid=36550 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:66:41:b4:e8:51:f2:1e:f1:95:37:07:dd:da:da:1a:0d:59:b7:72:7c:c8:a6:b8:84:56:b9:77:f4:b3:51:5e:dd direction=? spid=36550 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=? res=success' Jan 06 18:41:10 managed-node1 audit[3844]: USER_END pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:10 managed-node1 audit[3844]: USER_LOGOUT pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:10 managed-node1 audit[3844]: USER_LOGIN pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:10 managed-node1 audit[3844]: USER_START pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:10 managed-node1 audit[36574]: CRYPTO_KEY_USER pid=36574 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:66:41:b4:e8:51:f2:1e:f1:95:37:07:dd:da:da:1a:0d:59:b7:72:7c:c8:a6:b8:84:56:b9:77:f4:b3:51:5e:dd direction=? spid=36574 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=? res=success' Jan 06 18:41:10 managed-node1 audit[3844]: USER_END pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:10 managed-node1 audit[3844]: USER_LOGOUT pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:10 managed-node1 audit[3844]: USER_LOGIN pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:10 managed-node1 audit[3844]: USER_START pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:10 managed-node1 audit[36604]: CRYPTO_KEY_USER pid=36604 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:66:41:b4:e8:51:f2:1e:f1:95:37:07:dd:da:da:1a:0d:59:b7:72:7c:c8:a6:b8:84:56:b9:77:f4:b3:51:5e:dd direction=? spid=36604 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=? res=success' Jan 06 18:41:10 managed-node1 audit[3844]: USER_END pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:10 managed-node1 audit[3844]: USER_LOGOUT pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:10 managed-node1 audit[3844]: USER_LOGIN pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:10 managed-node1 audit[3844]: USER_START pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:10 managed-node1 audit[36630]: CRYPTO_KEY_USER pid=36630 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:66:41:b4:e8:51:f2:1e:f1:95:37:07:dd:da:da:1a:0d:59:b7:72:7c:c8:a6:b8:84:56:b9:77:f4:b3:51:5e:dd direction=? spid=36630 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=? res=success' Jan 06 18:41:10 managed-node1 audit[3844]: USER_END pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:10 managed-node1 audit[3844]: USER_LOGOUT pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:10 managed-node1 audit[3844]: USER_LOGIN pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:10 managed-node1 audit[3844]: USER_START pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:10 managed-node1 audit[36655]: CRYPTO_KEY_USER pid=36655 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:66:41:b4:e8:51:f2:1e:f1:95:37:07:dd:da:da:1a:0d:59:b7:72:7c:c8:a6:b8:84:56:b9:77:f4:b3:51:5e:dd direction=? spid=36655 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=? res=success' Jan 06 18:41:10 managed-node1 audit[3844]: USER_END pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:10 managed-node1 audit[3844]: USER_LOGOUT pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:10 managed-node1 audit[3844]: USER_LOGIN pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:10 managed-node1 audit[3844]: USER_START pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:10 managed-node1 audit[36679]: CRYPTO_KEY_USER pid=36679 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:66:41:b4:e8:51:f2:1e:f1:95:37:07:dd:da:da:1a:0d:59:b7:72:7c:c8:a6:b8:84:56:b9:77:f4:b3:51:5e:dd direction=? spid=36679 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=? res=success' Jan 06 18:41:10 managed-node1 audit[3844]: USER_END pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:10 managed-node1 audit[3844]: USER_LOGOUT pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:10 managed-node1 audit[3844]: USER_LOGIN pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=managed-node1 addr=10.31.40.165 terminal=/dev/pts/0 res=success' Jan 06 18:41:10 managed-node1 audit[3844]: USER_START pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=managed-node1 addr=10.31.40.165 terminal=/dev/pts/0 res=success' Jan 06 18:41:10 managed-node1 audit[36704]: CRYPTO_KEY_USER pid=36704 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:66:41:b4:e8:51:f2:1e:f1:95:37:07:dd:da:da:1a:0d:59:b7:72:7c:c8:a6:b8:84:56:b9:77:f4:b3:51:5e:dd direction=? spid=36704 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=managed-node1 addr=10.31.40.165 terminal=pts/0 res=success' Jan 06 18:41:10 managed-node1 python3[36730]: ansible-ansible.legacy.command Invoked with _raw_params=systemctl is-system-running _uses_shell=False expand_argument_vars=True stdin_add_newline=True strip_empty_ends=True argv=None chdir=None executable=None creates=None removes=None stdin=None Jan 06 18:41:10 managed-node1 audit[3844]: USER_END pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=managed-node1 addr=? terminal=/dev/pts/0 res=success' Jan 06 18:41:10 managed-node1 audit[3844]: USER_LOGOUT pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=managed-node1 addr=? terminal=/dev/pts/0 res=success' Jan 06 18:41:10 managed-node1 audit[3844]: USER_LOGIN pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:10 managed-node1 audit[3844]: USER_START pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:10 managed-node1 audit[36732]: CRYPTO_KEY_USER pid=36732 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:66:41:b4:e8:51:f2:1e:f1:95:37:07:dd:da:da:1a:0d:59:b7:72:7c:c8:a6:b8:84:56:b9:77:f4:b3:51:5e:dd direction=? spid=36732 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=? res=success' Jan 06 18:41:10 managed-node1 audit[3844]: USER_END pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:10 managed-node1 audit[3844]: USER_LOGOUT pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:12 managed-node1 audit[3844]: USER_LOGIN pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:12 managed-node1 audit[3844]: USER_START pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:12 managed-node1 audit[36757]: CRYPTO_KEY_USER pid=36757 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:66:41:b4:e8:51:f2:1e:f1:95:37:07:dd:da:da:1a:0d:59:b7:72:7c:c8:a6:b8:84:56:b9:77:f4:b3:51:5e:dd direction=? spid=36757 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=? res=success' Jan 06 18:41:12 managed-node1 audit[3844]: USER_END pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:12 managed-node1 audit[3844]: USER_LOGOUT pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:12 managed-node1 audit[3844]: USER_LOGIN pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:12 managed-node1 audit[3844]: USER_START pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:12 managed-node1 audit[36781]: CRYPTO_KEY_USER pid=36781 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:66:41:b4:e8:51:f2:1e:f1:95:37:07:dd:da:da:1a:0d:59:b7:72:7c:c8:a6:b8:84:56:b9:77:f4:b3:51:5e:dd direction=? spid=36781 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=? res=success' Jan 06 18:41:12 managed-node1 audit[3844]: USER_END pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:12 managed-node1 audit[3844]: USER_LOGOUT pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:12 managed-node1 audit[3844]: USER_LOGIN pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:12 managed-node1 audit[3844]: USER_START pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:12 managed-node1 audit[36811]: CRYPTO_KEY_USER pid=36811 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:66:41:b4:e8:51:f2:1e:f1:95:37:07:dd:da:da:1a:0d:59:b7:72:7c:c8:a6:b8:84:56:b9:77:f4:b3:51:5e:dd direction=? spid=36811 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=? res=success' Jan 06 18:41:12 managed-node1 audit[3844]: USER_END pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:12 managed-node1 audit[3844]: USER_LOGOUT pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:12 managed-node1 audit[3844]: USER_LOGIN pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:12 managed-node1 audit[3844]: USER_START pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:12 managed-node1 audit[36835]: CRYPTO_KEY_USER pid=36835 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:66:41:b4:e8:51:f2:1e:f1:95:37:07:dd:da:da:1a:0d:59:b7:72:7c:c8:a6:b8:84:56:b9:77:f4:b3:51:5e:dd direction=? spid=36835 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=? res=success' Jan 06 18:41:12 managed-node1 audit[3844]: USER_END pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:12 managed-node1 audit[3844]: USER_LOGOUT pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:12 managed-node1 audit[3844]: USER_LOGIN pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=managed-node1 addr=10.31.40.165 terminal=/dev/pts/0 res=success' Jan 06 18:41:12 managed-node1 audit[3844]: USER_START pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=managed-node1 addr=10.31.40.165 terminal=/dev/pts/0 res=success' Jan 06 18:41:12 managed-node1 audit[36860]: CRYPTO_KEY_USER pid=36860 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:66:41:b4:e8:51:f2:1e:f1:95:37:07:dd:da:da:1a:0d:59:b7:72:7c:c8:a6:b8:84:56:b9:77:f4:b3:51:5e:dd direction=? spid=36860 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=managed-node1 addr=10.31.40.165 terminal=pts/0 res=success' Jan 06 18:41:13 managed-node1 python3[36886]: ansible-setup Invoked with gather_subset=['!all', '!min', 'default_ipv4', 'distribution', 'distribution_major_version', 'distribution_version', 'domain', 'fqdn', 'hostname', 'os_family', 'pkg_mgr'] gather_timeout=10 filter=[] fact_path=/etc/ansible/facts.d Jan 06 18:41:13 managed-node1 audit[3844]: USER_END pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=managed-node1 addr=? terminal=/dev/pts/0 res=success' Jan 06 18:41:13 managed-node1 audit[3844]: USER_LOGOUT pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=managed-node1 addr=? terminal=/dev/pts/0 res=success' Jan 06 18:41:13 managed-node1 audit[3844]: USER_LOGIN pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:13 managed-node1 audit[3844]: USER_START pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:13 managed-node1 audit[36887]: CRYPTO_KEY_USER pid=36887 uid=0 auid=0 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:66:41:b4:e8:51:f2:1e:f1:95:37:07:dd:da:da:1a:0d:59:b7:72:7c:c8:a6:b8:84:56:b9:77:f4:b3:51:5e:dd direction=? spid=36887 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=? res=success' Jan 06 18:41:13 managed-node1 audit[3844]: USER_END pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:13 managed-node1 audit[3844]: USER_LOGOUT pid=3844 uid=0 auid=0 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:13 managed-node1 audit[36913]: CRYPTO_KEY_USER pid=36913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b6:fc:b6:14:4b:f9:56:a4:bd:9a:c1:1e:2e:03:a6:ab:21:a6:86:1e:e5:b2:1c:e2:dc:c6:ae:18:27:ad:be:87 direction=? spid=36913 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=? res=success' Jan 06 18:41:13 managed-node1 audit[36913]: CRYPTO_KEY_USER pid=36913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:70:f0:18:96:2a:d9:80:e6:bd:88:d2:10:86:8b:82:08:8b:65:a9:f0:33:79:a0:03:d1:7e:b8:86:52:7a:4c:af direction=? spid=36913 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=? res=success' Jan 06 18:41:13 managed-node1 audit[36913]: CRYPTO_KEY_USER pid=36913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:66:41:b4:e8:51:f2:1e:f1:95:37:07:dd:da:da:1a:0d:59:b7:72:7c:c8:a6:b8:84:56:b9:77:f4:b3:51:5e:dd direction=? spid=36913 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=? res=success' Jan 06 18:41:13 managed-node1 audit[36912]: CRYPTO_SESSION pid=36912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=36913 suid=74 rport=53356 laddr=10.31.41.247 lport=22 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=? res=success' Jan 06 18:41:13 managed-node1 audit[36912]: CRYPTO_SESSION pid=36912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=36913 suid=74 rport=53356 laddr=10.31.41.247 lport=22 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=? res=success' Jan 06 18:41:13 managed-node1 audit[36912]: USER_AUTH pid=36912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=? res=success' Jan 06 18:41:13 managed-node1 audit[36912]: CRYPTO_KEY_USER pid=36912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:f6:3d:5b:97:0b:77:c1:ca:d1:88:66:19:43:b6:46:bb:d6:b1:9b:77:03:92:51:fa:ff:3e:1c:f8:47:bc:0b:31 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=? res=success' Jan 06 18:41:13 managed-node1 audit[36912]: USER_ACCT pid=36912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/libexec/openssh/sshd-session" hostname=10.31.40.165 addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:13 managed-node1 sshd-session[36912]: Accepted publickey for root from 10.31.40.165 port 53356 ssh2: RSA SHA256:9j1blwt3wcrRiGYZQ7ZGu9axm3cDklH6/z4c+Ee8CzE Jan 06 18:41:13 managed-node1 audit[36912]: CRYPTO_KEY_USER pid=36912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=36913 suid=74 rport=53356 laddr=10.31.41.247 lport=22 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=? res=success' Jan 06 18:41:13 managed-node1 audit[36912]: CRED_ACQ pid=36912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/libexec/openssh/sshd-session" hostname=10.31.40.165 addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:13 managed-node1 audit[36912]: USER_ROLE_CHANGE pid=36912 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/libexec/openssh/sshd-session" hostname=10.31.40.165 addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:13 managed-node1 systemd-logind[605]: New session 9 of user root. ░░ Subject: A new session 9 has been created for user root ░░ Defined-By: systemd ░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel ░░ Documentation: sd-login(3) ░░ ░░ A new session with the ID 9 has been created for the user root. ░░ ░░ The leading process of the session is 36912. Jan 06 18:41:13 managed-node1 systemd[1]: Started session-9.scope - Session 9 of User root. ░░ Subject: A start job for unit session-9.scope has finished successfully ░░ Defined-By: systemd ░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel ░░ ░░ A start job for unit session-9.scope has finished successfully. ░░ ░░ The job identifier is 3746. Jan 06 18:41:13 managed-node1 sshd-session[36912]: pam_unix(sshd:session): session opened for user root(uid=0) by root(uid=0) Jan 06 18:41:13 managed-node1 audit[36912]: USER_START pid=36912 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/libexec/openssh/sshd-session" hostname=10.31.40.165 addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:13 managed-node1 audit[36915]: CRYPTO_KEY_USER pid=36915 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b6:fc:b6:14:4b:f9:56:a4:bd:9a:c1:1e:2e:03:a6:ab:21:a6:86:1e:e5:b2:1c:e2:dc:c6:ae:18:27:ad:be:87 direction=? spid=36915 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=? res=success' Jan 06 18:41:13 managed-node1 audit[36915]: CRYPTO_KEY_USER pid=36915 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:70:f0:18:96:2a:d9:80:e6:bd:88:d2:10:86:8b:82:08:8b:65:a9:f0:33:79:a0:03:d1:7e:b8:86:52:7a:4c:af direction=? spid=36915 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=? res=success' Jan 06 18:41:13 managed-node1 audit[36915]: CRYPTO_KEY_USER pid=36915 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:66:41:b4:e8:51:f2:1e:f1:95:37:07:dd:da:da:1a:0d:59:b7:72:7c:c8:a6:b8:84:56:b9:77:f4:b3:51:5e:dd direction=? spid=36915 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=? res=success' Jan 06 18:41:13 managed-node1 audit[36915]: CRED_ACQ pid=36915 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/libexec/openssh/sshd-session" hostname=10.31.40.165 addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:13 managed-node1 audit[36912]: USER_LOGIN pid=36912 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:13 managed-node1 audit[36912]: USER_START pid=36912 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:13 managed-node1 audit[36916]: CRYPTO_KEY_USER pid=36916 uid=0 auid=0 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:66:41:b4:e8:51:f2:1e:f1:95:37:07:dd:da:da:1a:0d:59:b7:72:7c:c8:a6:b8:84:56:b9:77:f4:b3:51:5e:dd direction=? spid=36916 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=? res=success' Jan 06 18:41:13 managed-node1 audit[36912]: USER_END pid=36912 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:13 managed-node1 audit[36912]: USER_LOGOUT pid=36912 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:13 managed-node1 sshd-session[36915]: Received disconnect from 10.31.40.165 port 53356:11: disconnected by user Jan 06 18:41:13 managed-node1 sshd-session[36915]: Disconnected from user root 10.31.40.165 port 53356 Jan 06 18:41:13 managed-node1 audit[36912]: CRYPTO_KEY_USER pid=36912 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=36915 suid=0 rport=53356 laddr=10.31.41.247 lport=22 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=? res=success' Jan 06 18:41:13 managed-node1 sshd-session[36912]: pam_unix(sshd:session): session closed for user root Jan 06 18:41:13 managed-node1 audit[36912]: USER_END pid=36912 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/libexec/openssh/sshd-session" hostname=10.31.40.165 addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:13 managed-node1 audit[36912]: CRED_DISP pid=36912 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/libexec/openssh/sshd-session" hostname=10.31.40.165 addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:13 managed-node1 systemd[1]: session-9.scope: Deactivated successfully. ░░ Subject: Unit succeeded ░░ Defined-By: systemd ░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel ░░ ░░ The unit session-9.scope has successfully entered the 'dead' state. Jan 06 18:41:13 managed-node1 systemd-logind[605]: Session 9 logged out. Waiting for processes to exit. Jan 06 18:41:13 managed-node1 systemd-logind[605]: Removed session 9. ░░ Subject: Session 9 has been terminated ░░ Defined-By: systemd ░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel ░░ Documentation: sd-login(3) ░░ ░░ A session with the ID 9 has been terminated. Jan 06 18:41:13 managed-node1 audit[36943]: CRYPTO_KEY_USER pid=36943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b6:fc:b6:14:4b:f9:56:a4:bd:9a:c1:1e:2e:03:a6:ab:21:a6:86:1e:e5:b2:1c:e2:dc:c6:ae:18:27:ad:be:87 direction=? spid=36943 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=? res=success' Jan 06 18:41:13 managed-node1 audit[36943]: CRYPTO_KEY_USER pid=36943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:70:f0:18:96:2a:d9:80:e6:bd:88:d2:10:86:8b:82:08:8b:65:a9:f0:33:79:a0:03:d1:7e:b8:86:52:7a:4c:af direction=? spid=36943 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=? res=success' Jan 06 18:41:13 managed-node1 audit[36943]: CRYPTO_KEY_USER pid=36943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:66:41:b4:e8:51:f2:1e:f1:95:37:07:dd:da:da:1a:0d:59:b7:72:7c:c8:a6:b8:84:56:b9:77:f4:b3:51:5e:dd direction=? spid=36943 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=? res=success' Jan 06 18:41:13 managed-node1 audit[36942]: CRYPTO_SESSION pid=36942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=36943 suid=74 rport=53368 laddr=10.31.41.247 lport=22 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=? res=success' Jan 06 18:41:13 managed-node1 audit[36942]: CRYPTO_SESSION pid=36942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac= pfs=curve25519-sha256 spid=36943 suid=74 rport=53368 laddr=10.31.41.247 lport=22 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=? res=success' Jan 06 18:41:13 managed-node1 audit[36942]: USER_AUTH pid=36942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=? res=success' Jan 06 18:41:13 managed-node1 audit[36942]: CRYPTO_KEY_USER pid=36942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:f6:3d:5b:97:0b:77:c1:ca:d1:88:66:19:43:b6:46:bb:d6:b1:9b:77:03:92:51:fa:ff:3e:1c:f8:47:bc:0b:31 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=? res=success' Jan 06 18:41:13 managed-node1 audit[36942]: USER_ACCT pid=36942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/libexec/openssh/sshd-session" hostname=10.31.40.165 addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:13 managed-node1 sshd-session[36942]: Accepted publickey for root from 10.31.40.165 port 53368 ssh2: RSA SHA256:9j1blwt3wcrRiGYZQ7ZGu9axm3cDklH6/z4c+Ee8CzE Jan 06 18:41:13 managed-node1 audit[36942]: CRYPTO_KEY_USER pid=36942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=36943 suid=74 rport=53368 laddr=10.31.41.247 lport=22 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=? res=success' Jan 06 18:41:13 managed-node1 audit[36942]: CRED_ACQ pid=36942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/libexec/openssh/sshd-session" hostname=10.31.40.165 addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:13 managed-node1 audit[36942]: USER_ROLE_CHANGE pid=36942 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pam_selinux default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/libexec/openssh/sshd-session" hostname=10.31.40.165 addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:13 managed-node1 systemd-logind[605]: New session 10 of user root. ░░ Subject: A new session 10 has been created for user root ░░ Defined-By: systemd ░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel ░░ Documentation: sd-login(3) ░░ ░░ A new session with the ID 10 has been created for the user root. ░░ ░░ The leading process of the session is 36942. Jan 06 18:41:13 managed-node1 systemd[1]: Started session-10.scope - Session 10 of User root. ░░ Subject: A start job for unit session-10.scope has finished successfully ░░ Defined-By: systemd ░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel ░░ ░░ A start job for unit session-10.scope has finished successfully. ░░ ░░ The job identifier is 3842. Jan 06 18:41:13 managed-node1 sshd-session[36942]: pam_unix(sshd:session): session opened for user root(uid=0) by root(uid=0) Jan 06 18:41:13 managed-node1 audit[36942]: USER_START pid=36942 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/libexec/openssh/sshd-session" hostname=10.31.40.165 addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:13 managed-node1 audit[36945]: CRYPTO_KEY_USER pid=36945 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:b6:fc:b6:14:4b:f9:56:a4:bd:9a:c1:1e:2e:03:a6:ab:21:a6:86:1e:e5:b2:1c:e2:dc:c6:ae:18:27:ad:be:87 direction=? spid=36945 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=? res=success' Jan 06 18:41:13 managed-node1 audit[36945]: CRYPTO_KEY_USER pid=36945 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:70:f0:18:96:2a:d9:80:e6:bd:88:d2:10:86:8b:82:08:8b:65:a9:f0:33:79:a0:03:d1:7e:b8:86:52:7a:4c:af direction=? spid=36945 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=? res=success' Jan 06 18:41:13 managed-node1 audit[36945]: CRYPTO_KEY_USER pid=36945 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:66:41:b4:e8:51:f2:1e:f1:95:37:07:dd:da:da:1a:0d:59:b7:72:7c:c8:a6:b8:84:56:b9:77:f4:b3:51:5e:dd direction=? spid=36945 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=? res=success' Jan 06 18:41:13 managed-node1 audit[36945]: CRED_ACQ pid=36945 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/libexec/openssh/sshd-session" hostname=10.31.40.165 addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:13 managed-node1 audit[36942]: USER_LOGIN pid=36942 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:13 managed-node1 audit[36942]: USER_START pid=36942 uid=0 auid=0 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=ssh res=success' Jan 06 18:41:13 managed-node1 audit[36946]: CRYPTO_KEY_USER pid=36946 uid=0 auid=0 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:66:41:b4:e8:51:f2:1e:f1:95:37:07:dd:da:da:1a:0d:59:b7:72:7c:c8:a6:b8:84:56:b9:77:f4:b3:51:5e:dd direction=? spid=36946 suid=0 exe="/usr/libexec/openssh/sshd-session" hostname=? addr=10.31.40.165 terminal=? res=success'